Symantec Tamper Protection Alert

[Guest]

I keep getting this from my Symantec Notification.

SYMANTEC TAMPER PROTECTION ALERT

Target: C:\Program Files\Common Files\Symantec Shared\NMain.exe
Event Info: (Unknown action) (Unknown entity)
Action Taken: Blocked
Actor Process: C:\Program Files\Windows Defender\MsMpEng.exe (PID 452)
Time: Saturday, April 15, 2006 11:38:15 AM

It looks like it is telling me that Defender is an intruder of some type.
How do I fix this?

 

[Bill Sanderson MVP]

Microsoft is looking into this--can you say what specific software and
version you are getting this on?

The only workaround I've seen so far is turning the tamper protection alert
off--and I can't give you a step by step on how to do that.

 

[Guest]

Norton System Works 2006.

Microsoft is looking into this--can you say what specific software and
version you are getting this on?

The only workaround I've seen so far is turning the tamper protection alert
off--and I can't give you a step by step on how to do that.

 

[Bill Sanderson MVP]

Thanks!

--

Norton System Works 2006.

 

[Guest]

Not to be contary, but the other workaround is to turn Defender OFF.

 

[Guest]

I have looked,but don't seem to find a way to turn it off. Do you know about
Systemworks 2006? If so, where do I find how to turn it off?

 

[Guest]

I do not know about Norton System Works, but if you go to Defender's
Tools>General Settings and then uncheck the scheduled scan and then scroll
down and uncheck Real Time Protections. That will stop Defender's RTP f rom
bothering Norton. You won't have Defender's RTP then, but you can use it as
an on-demand scanner for malware.

 

[Guest]

Symantec Tamper Protection Alerts reference a third-party spyware scanning
program
http://service1.symantec.com/SUPPOR...av_ce&dtype=corp&svy=&prev=&miniver=sav_ce_10

Don't know if this long link will work, so if not, click this one, type
Tamper Protection in the box and then click the search button.

http://www.symantec.com/techsupp/enterprise/products/sav_ce/sav_ce_10/search_ts.html

Bitman

 

[Bill Sanderson MVP]

Does it work to just turn off real-time protection, or do you get alerts on
scanning, too? I guess it goes without saying that if the beta causes you
problems, removing the beta is the best course of action.

--

 

[Bill Sanderson MVP]

Thanks - helpful reference--doesn't deal with the issue of scheduled scans
and real-time protection, of course.....

--

 

[Bill Sanderson MVP]

What happens? how do you become aware of these alerts?

 

[Guest]

When MS Defender runs, Symantec blocks it from running a scheduled scan on
its files and the Tamper window pops up. In Windows Defender, you can go
into Tools, Options and then scroll down to Advanced Options and then add the
following directories to skip:

C:\Program Files\Symantec Antivirus
C:\Program Files\Common Files\Symantec Shared

This should take care of it.

 

[Bill Sanderson MVP]

Thanks!

--

When MS Defender runs, Symantec blocks it from running a scheduled scan on
its files and the Tamper window pops up. In Windows Defender, you can go
into Tools, Options and then scroll down to Advanced Options and then add
the
following directories to skip:

C:\Program Files\Symantec Antivirus
C:\Program Files\Common Files\Symantec Shared

This should take care of it.

 

[Erhan Karabekir]

Even if you place some files to be excluded from scan under Advanced
Options, WD ignores this and attempts to access these files,as evident from
Norton Protection log. File exclusion doesn't function.
Erhan