Symantec Scan Engine deletes clean exeutable files such as the adobe flash player installer installation file.
A container violation has been found
Date/time of event = 2011-10-26 10:23:19 Event Severity Level = Warning URL = aihdownload.adobe.com/bin/install_flashplayer11x32ax_gtbd_aih.exe
File name = install_flashplayer11x32ax_gtbd_aih.exe
File status = BLOCKED
Component name = install_flashplayer11x32ax_gtbd_aih.exe
Component disposition = DELETED
Some executables are encrypted and by default Scan Engine deletes encrypted containers.
To resolve the issue follow these steps: 1. In the Scan Engine console Uncheck/Disable "Delete encrypted containers" in Policies - Filtering - Container Handling 2. Click on Save using the floppy disk icon in the top left 3. Go into services.msc and restart the Symantec Scan Engine service
Symantec Scan Engine 5.2.x
Imported Document ID: TECH178323
Subscribing will provide email updates when this Article is updated. Login is required.