PC Review


Reply
Thread Tools Rate Thread

Defender and Symantec not playing nice (KD)

 
 
=?Utf-8?B?S2VsbGk=?=
Guest
Posts: n/a
 
      23rd May 2006
What is with all the errors in my application log relating to defender and
symantec? We are running Defender Beta 2 (.1347) and Symantec Antivirus (v10)

Here are all of the errors (occur at startup):

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:37:20 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Progra~1\Symant~1\VPTray.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:37:20 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:09 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:09 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:10 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Symantec AntiVirus\DefWatch.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:10 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Symantec AntiVirus\SavRoam.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:10 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Symantec AntiVirus\Rtcscan.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:11 PM

Any ideas on why there are so many 'errors' between the two?

Kelli
 
Reply With Quote
 
 
 
 
Bill Sanderson MVP
Guest
Posts: n/a
 
      23rd May 2006
There are a number of posts, some with thoughful information on this
issue--in this very group, I believe.

If you find these log messages troublesome, you can either turn off the
optional Symantec feature which is generating them, or uninstall Windows
Defender. Neither app seems to be harmed by this interaction.

--

"Kelli" <(E-Mail Removed)> wrote in message
news:E4327376-B596-47AE-BC0D-(E-Mail Removed)...
> What is with all the errors in my application log relating to defender and
> symantec? We are running Defender Beta 2 (.1347) and Symantec Antivirus
> (v10)
>
> Here are all of the errors (occur at startup):
>
> SYMANTEC TAMPER PROTECTION ALERT
> Target: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
> Event Info: Open Process
> Action Taken: Blocked
> Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> Time: Tuesday, May 26, 2006 12:37:20 PM
>
> SYMANTEC TAMPER PROTECTION ALERT
> Target: C:\Progra~1\Symant~1\VPTray.exe
> Event Info: Open Process
> Action Taken: Blocked
> Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> Time: Tuesday, May 26, 2006 12:37:20 PM
>
> SYMANTEC TAMPER PROTECTION ALERT
> Target: C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> Event Info: Open Process
> Action Taken: Blocked
> Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> Time: Tuesday, May 26, 2006 12:41:09 PM
>
> SYMANTEC TAMPER PROTECTION ALERT
> Target: C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
> Event Info: Open Process
> Action Taken: Blocked
> Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> Time: Tuesday, May 26, 2006 12:41:09 PM
>
> SYMANTEC TAMPER PROTECTION ALERT
> Target: C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> Event Info: Open Process
> Action Taken: Blocked
> Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> Time: Tuesday, May 26, 2006 12:41:10 PM
>
> SYMANTEC TAMPER PROTECTION ALERT
> Target: C:\Program Files\Symantec AntiVirus\DefWatch.exe
> Event Info: Open Process
> Action Taken: Blocked
> Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> Time: Tuesday, May 26, 2006 12:41:10 PM
>
> SYMANTEC TAMPER PROTECTION ALERT
> Target: C:\Program Files\Symantec AntiVirus\SavRoam.exe
> Event Info: Open Process
> Action Taken: Blocked
> Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> Time: Tuesday, May 26, 2006 12:41:10 PM
>
> SYMANTEC TAMPER PROTECTION ALERT
> Target: C:\Program Files\Symantec AntiVirus\Rtcscan.exe
> Event Info: Open Process
> Action Taken: Blocked
> Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> Time: Tuesday, May 26, 2006 12:41:11 PM
>
> Any ideas on why there are so many 'errors' between the two?
>
> Kelli



 
Reply With Quote
 
=?Utf-8?B?S2VsbGk=?=
Guest
Posts: n/a
 
      23rd May 2006
Is this optional Symantec feature you talk about on the client or the server?
I will also search this group for more symantec information. Thank you!

Kelli

"Bill Sanderson MVP" wrote:

> There are a number of posts, some with thoughful information on this
> issue--in this very group, I believe.
>
> If you find these log messages troublesome, you can either turn off the
> optional Symantec feature which is generating them, or uninstall Windows
> Defender. Neither app seems to be harmed by this interaction.
>
> --
>
> "Kelli" <(E-Mail Removed)> wrote in message
> news:E4327376-B596-47AE-BC0D-(E-Mail Removed)...
> > What is with all the errors in my application log relating to defender and
> > symantec? We are running Defender Beta 2 (.1347) and Symantec Antivirus
> > (v10)
> >
> > Here are all of the errors (occur at startup):
> >
> > SYMANTEC TAMPER PROTECTION ALERT
> > Target: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
> > Event Info: Open Process
> > Action Taken: Blocked
> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> > Time: Tuesday, May 26, 2006 12:37:20 PM
> >
> > SYMANTEC TAMPER PROTECTION ALERT
> > Target: C:\Progra~1\Symant~1\VPTray.exe
> > Event Info: Open Process
> > Action Taken: Blocked
> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> > Time: Tuesday, May 26, 2006 12:37:20 PM
> >
> > SYMANTEC TAMPER PROTECTION ALERT
> > Target: C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
> > Event Info: Open Process
> > Action Taken: Blocked
> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> > Time: Tuesday, May 26, 2006 12:41:09 PM
> >
> > SYMANTEC TAMPER PROTECTION ALERT
> > Target: C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
> > Event Info: Open Process
> > Action Taken: Blocked
> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> > Time: Tuesday, May 26, 2006 12:41:09 PM
> >
> > SYMANTEC TAMPER PROTECTION ALERT
> > Target: C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
> > Event Info: Open Process
> > Action Taken: Blocked
> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> > Time: Tuesday, May 26, 2006 12:41:10 PM
> >
> > SYMANTEC TAMPER PROTECTION ALERT
> > Target: C:\Program Files\Symantec AntiVirus\DefWatch.exe
> > Event Info: Open Process
> > Action Taken: Blocked
> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> > Time: Tuesday, May 26, 2006 12:41:10 PM
> >
> > SYMANTEC TAMPER PROTECTION ALERT
> > Target: C:\Program Files\Symantec AntiVirus\SavRoam.exe
> > Event Info: Open Process
> > Action Taken: Blocked
> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> > Time: Tuesday, May 26, 2006 12:41:10 PM
> >
> > SYMANTEC TAMPER PROTECTION ALERT
> > Target: C:\Program Files\Symantec AntiVirus\Rtcscan.exe
> > Event Info: Open Process
> > Action Taken: Blocked
> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
> > Time: Tuesday, May 26, 2006 12:41:11 PM
> >
> > Any ideas on why there are so many 'errors' between the two?
> >
> > Kelli

>
>
>

 
Reply With Quote
 
Bill Sanderson MVP
Guest
Posts: n/a
 
      23rd May 2006
I believe it is a client setting--although with managed corporate versions,
perhaps the setting can be controlled centrally--I'm afraid I don't have any
clients using the version which have this setting as yet.

--

"Kelli" <(E-Mail Removed)> wrote in message
news72B3F71-97BF-4FD6-B242-(E-Mail Removed)...
> Is this optional Symantec feature you talk about on the client or the
> server?
> I will also search this group for more symantec information. Thank you!
>
> Kelli
>
> "Bill Sanderson MVP" wrote:
>
>> There are a number of posts, some with thoughful information on this
>> issue--in this very group, I believe.
>>
>> If you find these log messages troublesome, you can either turn off the
>> optional Symantec feature which is generating them, or uninstall Windows
>> Defender. Neither app seems to be harmed by this interaction.
>>
>> --
>>
>> "Kelli" <(E-Mail Removed)> wrote in message
>> news:E4327376-B596-47AE-BC0D-(E-Mail Removed)...
>> > What is with all the errors in my application log relating to defender
>> > and
>> > symantec? We are running Defender Beta 2 (.1347) and Symantec
>> > Antivirus
>> > (v10)
>> >
>> > Here are all of the errors (occur at startup):
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:37:20 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Progra~1\Symant~1\VPTray.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:37:20 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:09 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Common Files\Symantec
>> > Shared\SPBBC\SPBBCSvc.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:09 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:10 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Symantec AntiVirus\DefWatch.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:10 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Symantec AntiVirus\SavRoam.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:10 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Symantec AntiVirus\Rtcscan.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:11 PM
>> >
>> > Any ideas on why there are so many 'errors' between the two?
>> >
>> > Kelli

>>
>>
>>



 
Reply With Quote
 
Bill Sanderson MVP
Guest
Posts: n/a
 
      23rd May 2006
The most recent post which I think is helpful on this is from Bitman, on May
21 in this forum, ending the thread "Another observation on the "Symantec"
conflict."

--

"Kelli" <(E-Mail Removed)> wrote in message
news72B3F71-97BF-4FD6-B242-(E-Mail Removed)...
> Is this optional Symantec feature you talk about on the client or the
> server?
> I will also search this group for more symantec information. Thank you!
>
> Kelli
>
> "Bill Sanderson MVP" wrote:
>
>> There are a number of posts, some with thoughful information on this
>> issue--in this very group, I believe.
>>
>> If you find these log messages troublesome, you can either turn off the
>> optional Symantec feature which is generating them, or uninstall Windows
>> Defender. Neither app seems to be harmed by this interaction.
>>
>> --
>>
>> "Kelli" <(E-Mail Removed)> wrote in message
>> news:E4327376-B596-47AE-BC0D-(E-Mail Removed)...
>> > What is with all the errors in my application log relating to defender
>> > and
>> > symantec? We are running Defender Beta 2 (.1347) and Symantec
>> > Antivirus
>> > (v10)
>> >
>> > Here are all of the errors (occur at startup):
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:37:20 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Progra~1\Symant~1\VPTray.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:37:20 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:09 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Common Files\Symantec
>> > Shared\SPBBC\SPBBCSvc.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:09 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:10 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Symantec AntiVirus\DefWatch.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:10 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Symantec AntiVirus\SavRoam.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:10 PM
>> >
>> > SYMANTEC TAMPER PROTECTION ALERT
>> > Target: C:\Program Files\Symantec AntiVirus\Rtcscan.exe
>> > Event Info: Open Process
>> > Action Taken: Blocked
>> > Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
>> > Time: Tuesday, May 26, 2006 12:41:11 PM
>> >
>> > Any ideas on why there are so many 'errors' between the two?
>> >
>> > Kelli

>>
>>
>>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Vista Not Playing Nice - Sharing Files Powlaz Windows Vista Networking 9 24th Jun 2008 03:13 AM
Re: Access 97 and XP not playing nice Douglas J Steele Microsoft Access 0 16th Sep 2005 03:07 PM
ASP.NET and SQL 2000 not playing nice? Hugh G. Johnson Microsoft ASP .NET 3 7th Sep 2004 09:08 AM
OL2000 and OL2002 not playing nice with POP3 iat Microsoft Outlook 2 19th Jan 2004 10:01 PM
Autocomplete - Iframe - IE - Not Playing Nice Togethor Matt Windows XP Internet Explorer 0 24th Oct 2003 05:49 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 10:54 AM.