Endpoint Protection

Upon manual scan the following log is produced:

"Jun 14 07:25:09 engs01 rtvscand: Could not scan 1 files inside /lib/firmware/vxge/X3fw-pxe.ncf due to extraction errors encountered by the Decomposer Engines."

The file permissions are ugo readable. (Though the error message does not suggest permissions anyway.)

This also occurs for "X3fw-pxe.ncf" in the same location. It occurs on four machines that I have scanned, which are all that I have tried.

Linux dist is Ubuntu 16.04.

This scan is done on behalf of a customer so I would like to be able to explain why its happening and, more importantly, that is not an issue or threat.

Thanks.

 

Generally it means the decomposer engine doesn't have a signature to extract and scan inside. But maybe you'll want to contact support so they can look into this issue.

Hi Stephen,

What exactly are these "/lib/firmware/vxge/X3fw-pxe.ncf" files?  Chances are they are a file type or compression format that SEP cannot open to look inside.  (It can open a large number of the most common container types, etc but cannot handle every single file type ever invented.)

A useful article:

"Could not scan [#] files inside [path][filename] due to extraction errors encountered by the Decomposer Engines" during a scan
http://www.symantec.com/docs/TECH99755

Please do keep this thread up-to-date with your progress!