Re: Antivirus warnings from Windows Security Center

["Stanclift, Michael" <michael.stanclift () ROCKHURST EDU>]

We disable security center for all domain joined systems.

Michael Stanclift
Network Analyst
Rockhurst University

http://help.rockhurst.edu
(816) 501-4231


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Gary 
Flynn
Sent: Monday, April 13, 2009 10:21 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Antivirus warnings from Windows Security Center


Hi,

Our desktop support folks are considering turning off anti-virus
monitoring by the Windows Security Center due to false reports
of anti-virus problems that confuse computer users.

We're running Symantec Corporate Ediction 10.x and when the
computers first start the WSC will pop up saying anti-virus
isn't operating and/or definitions are out of date.

Have you seen similar behavior? Do you have a confirmed
explanation? One explanation I saw for the startup message
was that the user is allowed to login before all Symantec
services are started.
http://www.symantec.com/connect/forums/symantec-antivirus-101-corporate-edition 


Did you take any action such as disabling WSC monitoring of AV
software? I kind of like the dual monitoring but I have to admit
any malware worth its salt is going to disable both WSC and AV
if it runs with privilege.

thanks,

-- 
Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security