Issues with Behavioral Access Protection

[addus5]

So it looks like I need to disabled two Access protection rules that will help prevent virus's in our enteprise.

1.)Prevent execution in Internet Explorer
2.)Prevent execution in Outlook

Access protection is scanning hintprovider-x-x-x.dll when outlook and internet explorer load about 50 times spiking CPU utilization. This hintprovider dll is part of Microsoft Livemeeting.

It is also preventing a web Java app TTAWINClient.exe from executing in internet explorer. The purpose of this app is to print web data back to a local printer.

Unlike the port blocking rules you can put in an exclusions. What was NAI thinking??? I have to disable these rules now. I hear there is a FMR in and that it will come out in the next version release which will probably be a year down the road. All the reasons to upgrade to VSE 8.0 are fading into the sunset.

 

[JimmyZ1]

have you applied any of the 9 patches available for VS 8?

 

[addus5]

On a few machines. We are waiting for Patch 10 until we deploy to the enterprise.

The behavior is actually occuring. I dont think the patch will fix it. There is just no way to enter an exclusion in for the Behavior Blocking Events. A FMR has been entered and they said it would probably come out in the next product release.

 

[JimmyZ1]

yeah, I had to disable a bunch of those settings too, mainly startup folder .exe's were all crapping out, and we don't use outlook...