Endpoint Protection

  • Private Community
 View Only

  • 1.  OnBase file deletions

    Posted Nov 09, 2011 06:23 PM

    We are trying to deploy Hyland OnBase version 10, Windows 7 Pro 64-bit, and SEP 12.1 in the same upgrade process.  As you can imagine it's a lot of work.  We are having a problem with SEP 12.1 detecting Hyland application files, specifically DLL's and OCX's, as viruses and deleting them.  So far, we have added the exclusion for the C:\Program Files\Hyland Software\ directory but we found that files were being deleted from the end users' user profile directory as well as the C:\Windows\SysWOW64\ directory.  I don't want to exclude those directories from auto scanning though.  Has anyone else seen this behavior?  If so, were you able to implement a fix for it?  I was able to get a list of files to exclude from the technical staff at Hyland but that would mean that I need to manually add each file then manually check for any new files installed as a result of a periodic update.  If anyone has ideas on how to correct this, please let me know.

    Best regards,

    Wilton Adams

    Evanston, IL



  • 2.  RE: OnBase file deletions

    Broadcom Employee
    Posted Nov 09, 2011 07:03 PM

    What are the files being detected as?  You may want to push the software vendor into getting their files whitelisted.

    https://submit.symantec.com/whitelist/isv/



  • 3.  RE: OnBase file deletions

    Trusted Advisor
    Posted Nov 10, 2011 06:43 AM

    Hello,

    A clear case of False Positive.

    I would recommend you to Submit these files to the Symantec Security Response Team on the Sites Below:

    https://submit.symantec.com/false_positive/

    https://submit.symantec.com/whitelist/isv/

    https://submit.symantec.com/security_risks/dispute/

    and Create a Case with the Symantec Technical Support Team for the same.

    I am sure that would help you!!