Solved

Strong AV Policy blocking images in Outlook

Posted on 2014-03-19
7
790 Views
Last Modified: 2014-04-05
Hi

The setup:
Windows 7(64) / Office 2010(64) both service packed and patched up to latest.  Mcafee Virusscan 8.8 patch 4. Managed by epo.  This is a new installation with little other software installed.

The problem:
Access protection appears to be blocking Outlook from displaying web images.  If I disable access protection, all is good again. Have run a full and deep system scan and found nothing malicious.

The Access Protection log file shows the following:

C:\Windows\system32\DllHost.exe triggering Anti-spyware Standard Protection:Protect Internet Explorer favorites and settings

and

C:\Windows\system32\taskhost.exe triggering Anti-virus Maximum Protection:Protect cached files from password and email address stealers

I dont think I want to exclude these processes from scanning.  Please help.
Thanks
0
Comment
Question by:space_time
  • 3
  • 3
7 Comments
 
LVL 13

Expert Comment

by:Norm Dickinson
Comment Utility
McAfee offers a very robust and configurable system of protection and it can be a bit intimidating to install for this very reason. The generic "Standard" or "Maximum" protection levels are only starting points for most installations.

The full knowledge base is located at https://support.mcafee.com/ServicePortal/faces/knowledgecenter

McAfee also offers a wide variety of advanced training and certification for free to its partners. Details can be found at http://www.mcafee.com/us/partners.aspx

Unfortunately this is not one of those topics that has an easy answer or a "low, medium or high" type of "level" of protection. One size does not fit all. Here it pays to learn the product fully and to implement the best custom fit for the client, or call support and have them walk you thru the steps based upon management buy-in and a decided set of rules.

Wait until you set up the firewall - it's even more powerful and has even more features that will need a similar approach in order to know you are protected. McAfee products are not a place to be guessing, after all.
0
 
LVL 53

Expert Comment

by:McKnife
Comment Utility
I can only fully agree.
You need to be aware not only what setting that would be, but what consequences it would mean for overall security.

If you need to find that setting and no one here knows it, open a ticket with McAfee support.
0
 

Author Comment

by:space_time
Comment Utility
Thanks for tip.  McAfee support was my next port of call.  To clarify, this is not a new mcafee setup, but a new workstation setup.  The av policies are historic and have not caused a problem like this in the past.  I am familiar with the configuration of the suite and epo, but I think this particular problem is to do with the way Outlook works in this particular version.  Will get ticket open Mcafee and see if I get a solution.  Will post what I get back here.  Cheers
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 13

Expert Comment

by:Norm Dickinson
Comment Utility
Thanks for the update! Please post the resulting solution here if you don't mind so that others will be able to find it from searching the knowledge base.
0
 

Accepted Solution

by:
space_time earned 0 total points
Comment Utility
Ok here is my update and its one of those 'smacks head against keyboard' answers.  There was nothing wrong with the epo or virusscan.  The same policy was applied to 2 machines and was only a problem on 1.  I figured the problem was access protection as when disabling it on the non-working machine the problem went away.

The difference between the machines was the Internet Explorer version.  The working machine was on IE9 and the non-working IE11.  At first I dropped IE down to 10 and still no luck but going further to 9 got it working.  Microsoft changed something fundamental in how Outlook uses IE between 9 and 10.  I don't know what but I'll have to stick with 9 for the moment.  Its annoying because the assumption is that IE 10/11 would be more secure than 9.  Apparently this is not the case.

Thanks to all who helped.
0
 
LVL 13

Expert Comment

by:Norm Dickinson
Comment Utility
You would probably need to add a site or sites to the trusted site list. IE11 has some inherent trust issues and this will resolve the issue should you run into it again.
0
 

Author Closing Comment

by:space_time
Comment Utility
Solved and understood this particular problem with this answer.  Would still like to know how to update to IE10/11 without making my computer insecure.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

This article will show you how to use shortcut menus in the Access run-time environment.
Outlook Free & Paid Tools
Learn how to create and modify your own paragraph styles in Microsoft Word. This can be helpful when wanting to make consistently referenced styles throughout a document or template.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now