Endpoint Protection Small Business Edition

 View Only
  • 1.  C:\Windows|System32|Svchost.exe

    Posted Oct 09, 2012 01:34 PM

    I keep getting an error with C:\Windows|System32|Svchost.exe  how do I make and exception for this?



  • 2.  RE: C:\Windows|System32|Svchost.exe

    Trusted Advisor
    Posted Oct 09, 2012 03:12 PM

    Hello,

    Check these Articles:

    Error: "Security Risk Found! Hosts File Change in File: c:\windows\system32\svchost.exe by: SONAR scan"

    http://www.symantec.com/docs/TECH164391

    Symantec Endpoint Protection 12.1: Blocked System Change Events produce unexpected messages

    http://www.symantec.com/docs/TECH161646

    Creating an DNS or Host File Change Exception in Symantec Endpoint Protection Manager 12.1 RU1 MP1 and above.

    https://www-secure.symantec.com/connect/articles/creating-dns-or-host-file-change-exception-symantec-endpoint-protection-manager-121-ru1-mp1

    Hope that helps!!



  • 3.  RE: C:\Windows|System32|Svchost.exe



  • 4.  RE: C:\Windows|System32|Svchost.exe

    Posted Oct 09, 2012 07:17 PM

    It would be helpful to know what version of SEP you're using, what's installed (SEPM? SEP client?), which operating system, etc... but more importantly, what the exact error is that you are seeing. smiley

    sandra