1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

[symantec Tamper Protection Alert]

Discussion in 'Other PC Software' started by navylord, 2008/05/22.

  1. 2008/05/22
    navylord

    navylord Inactive Thread Starter

    Joined:
    2008/05/22
    Messages:
    6
    Likes Received:
    0
    [FONT= "Fixedsys"][/FONT]
    Hello All, Today, I downloaded Advanced Windows Care Personal V2 and touched up my startup page. I am now receiving this error in my event viewer. Can someone please assist me on how to correct this??

    I am running Symantec AV Corp ED.
    Thank you in advance

    SYMANTEC TAMPER PROTECTION ALERT

    Target: C:\Program Files\Symantec AntiVirus\VPTray.exe
    Event Info: Set Information Process
    Action Taken: Blocked
    Actor Process: C:\Program Files\IObit\Advanced WindowsCare V2\MemCleaner.exe (PID 2616)
    Time: Thursday, May 22, 2008 10:32:42 PM
     
    navylord,
    #1
  2. 2008/05/22
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    navylord - Welcome to the Board :)

    I must admit that I have never heard of Advanced Windows Care Personal until seeing it in your post. I would always be very wary of totally unknown programs which promise to fix or tune up your computer. They often do more harm than good :)

    I suggest you restore any changes it made - there appears to be a restore option in conjunction with System Restore, uninstall AWC and ask for advice here in tweaking your startups.

    Reliable programs for this are Mike Lin's StartUp Control Panel, Codestuff Starter and Autoruns from MS

    With regard to the Event Viewer my take on this is that Norton is doing its job and preventing what it considers to be an unwelcome process - MemCleaner.exe - from accessing the memory.
     
    PeteC,
    #2


  3. to hide this advert.

  4. 2008/05/22
    navylord

    navylord Inactive Thread Starter

    Joined:
    2008/05/22
    Messages:
    6
    Likes Received:
    0
    Thanks for the reply Pete...I got the info on the program from lurking on the WinMatrix Site all day. It seems to have done a good job except for that one problem. Hmmmm...I will review what you posted...Thanks again.
     
    navylord,
    #3
  5. 2008/05/22
    mailman Lifetime Subscription

    mailman Geek Member

    Joined:
    2004/01/17
    Messages:
    1,901
    Likes Received:
    11
    There was a brief discussion about Advanced Windows Care Personal at dslreports.com/broadbandreports.com last December.

    Doesn't appear (so far) to be malicious. However, I still would exercise caution. ;)

    Might be a good idea to submit the identified MemCleaner.exe to Jotti and VirusTotal to further investigate the file.
     
    Last edited: 2008/05/22
    mailman,
    #4
  6. 2008/05/22
    navylord

    navylord Inactive Thread Starter

    Joined:
    2008/05/22
    Messages:
    6
    Likes Received:
    0
    Mailman,

    Got this from Virus Total:
    -
    File has already been analysed:
    MD5: 49f05d4c36f059b1a501937c0e7dab4e
    First received: -
    Date: 05.20.2008 12:28:21 (CET) [>2D]
    Results: 0/32
    Permalink: analisis/05aca8d4dbe4895e0db2dd2270cc81fd

    and this from Jotti's:

    File: MemCleaner.exe
    Status: OK
    MD5: 49f05d4c36f059b1a501937c0e7dab4e
    Packers detected: -
     
    navylord,
    #5
  7. 2008/05/22
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    It is an very good program especially for Novice and Intermediate users.

    I have several clients that use it and are very pleased with it. It has been around for years but became more popular lately especially since becoming hosted by MajorGeeks.com.

    Since then they have recently done some very good upgrades the the program.

    The memcleaner is part of it and is OK. Just need permission to run given to Symantec!

    Mike
     
    mflynn,
    #6
  8. 2008/05/22
    navylord

    navylord Inactive Thread Starter

    Joined:
    2008/05/22
    Messages:
    6
    Likes Received:
    0
    Mike,

    Yes, I did the research on it prior to downloading...it does a great job. I just can't figure out how to get symantec to unblock this specific file. Thnks for the reply.
     
    navylord,
    #7
  9. 2008/05/22
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    I am sure there is an approved or ignore list somewhere in Norton. Perhaps a Norton user will offer help.

    I would never use norton myself so I am unfamiliar.

    What version Symantec here are a couple google links.

    The block could be coming from the Virus scanner mistakenly trying to block Malware or most likely from the Firewall.

    http://answers.yahoo.com/question/index?qid=20080222222732AAWKDbf

    http://service1.symantec.com/SUPPOR...7bbd57171094c6e088256c2f007eb6a8?OpenDocument

    To get around it for now disable Norton until it finishes then renable.

    Mike
     
    mflynn,
    #8
  10. 2008/05/22
    navylord

    navylord Inactive Thread Starter

    Joined:
    2008/05/22
    Messages:
    6
    Likes Received:
    0
    OK...thanks for everything...gnite!
     
    navylord,
    #9
  11. 2008/05/22
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    OK don't forget to post back the resolution as it may help someone else.

    Mike
     
    mflynn,
    #10
  12. 2008/05/22
    navylord

    navylord Inactive Thread Starter

    Joined:
    2008/05/22
    Messages:
    6
    Likes Received:
    0
    SOLUTION: I decided to not keep the memcleaner running in the system tray. When I do use it I will disable Norton until it is complete. Thanks to all who replied...
     
    navylord,
    #11
  13. 2008/05/23
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    OK that is a good idea. I don't recommend running any of its resident features.

    Go into its config and tell it not to load with windows.

    Mike
     
    mflynn,
    #12

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...