jjwelly Posted August 10, 2015 Report Share Posted August 10, 2015 Hey All: I have about 30 computers running EAM. I am running EEC as well, with mixed success. We are having issues with EAM detecting our printer driver as malware by the behavior blocker. Even though we click allow always to allow the file, it continues to show up. EEC has no options or settings for behavior blocker, other than enabled or disabled. If I open EAM at the client, there's also no way to whitelist the file, or create a rule, as you can only select .exe files. The driver is a .srv file. Anybody know what I can do to stop EAM from detecting this? Link to comment Share on other sites More sharing options...
Christian Peters Posted August 10, 2015 Report Share Posted August 10, 2015 Hello, please open EAM and go to Protection subsection File Guard. Press the button Manage whitelist. Choose File in the Type column and click in the empty Item box. Press the 3 dots and select the driver file EF254846.srv from the driver folder. Press OK to add this file to the whitelist. The behavior blocker alert occurs again? Link to comment Share on other sites More sharing options...
Siketa Posted August 11, 2015 Report Share Posted August 11, 2015 Is this a possible bug? Link to comment Share on other sites More sharing options...
jjwelly Posted August 11, 2015 Author Report Share Posted August 11, 2015 Hello, please open EAM and go to Protection subsection File Guard. Press the button Manage whitelist. Choose File in the Type column and click in the empty Item box. Press the 3 dots and select the driver file EF254846.srv from the driver folder. Press OK to add this file to the whitelist. The behavior blocker alert occurs again? i did this already, but the type wasn't file. changed this and gonna see what happens from here on out. problem is so many people have clicked 'allow always' for this since it pops up so much, I think all my users are gonna always click allow always not matter what the detection is. Link to comment Share on other sites More sharing options...
Christian Peters Posted August 11, 2015 Report Share Posted August 11, 2015 Hello, does the exception work with the File whitelist entry? Link to comment Share on other sites More sharing options...
Recommended Posts