Educause Security Discussion mailing list archives

Re: Antivirus warnings from Windows Security Center


From: Brenda B Gombosky <brenda.gombosky () LOUISVILLE EDU>
Date: Mon, 13 Apr 2009 12:07:14 -0400

We had this problem and had to build an inf file to allow Symantec to get through - we are using version 11 now and it 
takes care of these issues. 
 
Brenda B. Gombosky, CISSP, CGEIT, CISM, CHSP
Director, Enterprise Security  
Information Technology
University of Louisville
Miller IT Center, Room 109
Louisville, KY 40292
(502)852-5037
(502)419-6689



Gary Flynn <flynngn () JMU EDU> 4/13/2009 11:21 AM >>>

Hi,

Our desktop support folks are considering turning off anti-virus
monitoring by the Windows Security Center due to false reports
of anti-virus problems that confuse computer users.

We're running Symantec Corporate Ediction 10.x and when the
computers first start the WSC will pop up saying anti-virus
isn't operating and/or definitions are out of date.

Have you seen similar behavior? Do you have a confirmed
explanation? One explanation I saw for the startup message
was that the user is allowed to login before all Symantec
services are started.
http://www.symantec.com/connect/forums/symantec-antivirus-101-corporate-edition 


Did you take any action such as disabling WSC monitoring of AV
software? I kind of like the dual monitoring but I have to admit
any malware worth its salt is going to disable both WSC and AV
if it runs with privilege.

thanks,

-- 
Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security

Current thread: