Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 1075 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

"Suspicious Behaviour" issue when installing some allowed applications

kuzess

Hi Everyone,

We currently having issue when we say allow Yahoo Messenger, but the instalation of Yahoo messenger will not successful with the HIPS/ProcInj-001 and the the temp files for the Yahoo installer are keep on changing, I can't just keep on allow the the tempolary file name for the yahoo installer.

Any solution for this without disable the Suspicious behaviour detection?

I am currently using ESDP 9.5 with Sophos Enterprise Console 4.5.0.9

:3798


This thread was automatically locked due to age.
  • 0

    Hi Kuzess,

    What OS is this occurring on ?

    XP/Vista/Win7? 32 or 64 ?

    How many machines are you using Yahoo Messenger on ?

    Also what version of Yahoo are you using, I tried the latest on XP and got no ProcInj alerts.

    What are the alerts you are seeing? multiple processes ? a temp file ?

    OD

    :3799
  • 0

    Hi OD,

    The OS that currently I found was in Win7 and Vista, few persons had reporting having issue when Install the Yahoo Messennger.

    I not so sure the version that the are facing the issue.

    The one I saw myself are the win7 what install the messenger from http://messenger.yahoo.com/download/

    The file the giving alerts are located in a temp folder.

    :3812
Unfiltered HTML