Hello,
Please forgive my ignorance in advance. I'm the backup to the backup to the backup of our orgs Sophos Admin. We are using ECM 4.0 and Endpoint Security and Control v9.0. Sophos isn't allowing our clients to install a database program. Below is the error -
20100802 180438 Process "c:\Users\Scott.Bentley\AppData\Local\Temp\mia9774.tmp\setuptntmpd.exe" exhibiting suspicious behavior pattern 'HIPS/ProcInj-001'.
Process killed.
On my client, I changed my HIPS runtime behaviour analysis to "alert only". I didn't get an alert, but it did end up installing the software this time. We've added this .exe to the ECM's multiple exclusion lists. It continues to kill the installation each time it's a fresh install or the program attempts to update to a new version. The updates aren't mandatory, scheduled or pushed, or else we would disable HIPS temporarily from the server, then enable it after it's done. Suggestions or what further info is needed? Thanks.
This thread was automatically locked due to age.
