Defender and Symantec not playing nice (KD)

[Guest]

What is with all the errors in my application log relating to defender and
symantec? We are running Defender Beta 2 (.1347) and Symantec Antivirus (v10)

Here are all of the errors (occur at startup):

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:37:20 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Progra~1\Symant~1\VPTray.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:37:20 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:09 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:09 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:10 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Symantec AntiVirus\DefWatch.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:10 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Symantec AntiVirus\SavRoam.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:10 PM

SYMANTEC TAMPER PROTECTION ALERT
Target: C:\Program Files\Symantec AntiVirus\Rtcscan.exe
Event Info: Open Process
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID1248)
Time: Tuesday, May 26, 2006 12:41:11 PM

Any ideas on why there are so many 'errors' between the two?

Kelli

 

[Bill Sanderson MVP]

There are a number of posts, some with thoughful information on this
issue--in this very group, I believe.

If you find these log messages troublesome, you can either turn off the
optional Symantec feature which is generating them, or uninstall Windows
Defender. Neither app seems to be harmed by this interaction.

 

[Guest]

Is this optional Symantec feature you talk about on the client or the server?
I will also search this group for more symantec information. Thank you!

Kelli

 

[Bill Sanderson MVP]

I believe it is a client setting--although with managed corporate versions,
perhaps the setting can be controlled centrally--I'm afraid I don't have any
clients using the version which have this setting as yet.

--

 

[Bill Sanderson MVP]

The most recent post which I think is helpful on this is from Bitman, on May
21 in this forum, ending the thread "Another observation on the "Symantec"
conflict."

--