User is getting popups frequently

[Migration User]

Issue is the Endpoint Security Personal Policy Alert is popping up Data protection Alert and blocking some files like “ntoskrnl.exe, smcgui.exe, igfxtray.exe, outlook.exe, ctfmon.exe, apoint.exe, ccmexec.exe, lucoms~1.exe & disknet.exe”. I have experienced the same issue once I was scanning one user system. Attached is the screenshot, please advice how to stop these pop up alerts .

 

1, Advise us how to stop these kind of pop up's

2, Because of these pop up wireless access is also blocking. Please let us know how to deny these pop up and how to access the wireless

Attachment(s)

End point pop up.doc   45 KB 1 version

[Thomas K]

I suspect you are infected with a rouge AV.

What AV product and version are you running?

I recommend updating your definitions and running a full scan in Safe-mode.

If that fails to find the threat, try the Norton Power Eraser to scan for hard-to-find threats.

 

http://security.symantec.com/nbrt/npe.asp?lcid=1033&origin=default

 

Moving this thread to the Endpoint Protection forum.

 

Thomas

[Mick2009]

Hi Shinoj,

 

"Thumbs up" to Cycletech's advice--- those pop-ups do not come from Symantec Endpoint Protection.  They are either from some other (legitimate) third-party product or from a scamware/scareware/smitfraud/fake AV infection that is trying to look legitimate.

 

I suggest that the computer be isolated, a full system scan be completee with the latest Rapid Release definitions, and then the Power Eraser be run if necessary.

 

Thanks and best regards,

 

Mick

[Mithun Sanghavi]

Hello,

I personally would suggest you to follow the Symantec Article (on Forums)

Using Symantec Support Tool, how do we Collect the Suspicious Files and Submit the same to Symantec Security Response Team.

https://www-secure.symantec.com/connect/articles/using-symantec-support-tool-how-do-we-collect-suspicious-files-and-submit-same-symantec-sec

 

Check it, its quite useful.

[Mick2009]

Hi again,

 

Those pop-ups are from Pointsec, which must also be installed on the same computer.  I would take the matter up with Checkpoint. 

http://www.checkpoint.com/products/media-encryption/index.html

 

Please let the Connect community know if you need any additional assistance or if thsi answers your query!

 

With best regards,

 

Mick

[Migration User]

Hi,

Checkpoint endpoint security is not a product of Symantec?

Do Symantec support this pointsec protector?

So it is a seperate Product.

[Thomas K]

No, Checkpoint Security is a different company. You should try posting your issue in their forums.

 

https://forums.checkpoint.com/forums/category.jspa?categoryID=3

 

Best,

Thomas

[pete]

Yes pointsec is not a Symantec product, it is from Checkpoint

http://www.checkpoint.com/pointsec/