?
Solved

Strong AV Policy blocking images in Outlook

Posted on 2014-03-19
7
Medium Priority
?
851 Views
Last Modified: 2014-04-05
Hi

The setup:
Windows 7(64) / Office 2010(64) both service packed and patched up to latest.  Mcafee Virusscan 8.8 patch 4. Managed by epo.  This is a new installation with little other software installed.

The problem:
Access protection appears to be blocking Outlook from displaying web images.  If I disable access protection, all is good again. Have run a full and deep system scan and found nothing malicious.

The Access Protection log file shows the following:

C:\Windows\system32\DllHost.exe triggering Anti-spyware Standard Protection:Protect Internet Explorer favorites and settings

and

C:\Windows\system32\taskhost.exe triggering Anti-virus Maximum Protection:Protect cached files from password and email address stealers

I dont think I want to exclude these processes from scanning.  Please help.
Thanks
0
Comment
Question by:space_time
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 
LVL 13

Expert Comment

by:Norm Dickinson
ID: 39941951
McAfee offers a very robust and configurable system of protection and it can be a bit intimidating to install for this very reason. The generic "Standard" or "Maximum" protection levels are only starting points for most installations.

The full knowledge base is located at https://support.mcafee.com/ServicePortal/faces/knowledgecenter 

McAfee also offers a wide variety of advanced training and certification for free to its partners. Details can be found at http://www.mcafee.com/us/partners.aspx

Unfortunately this is not one of those topics that has an easy answer or a "low, medium or high" type of "level" of protection. One size does not fit all. Here it pays to learn the product fully and to implement the best custom fit for the client, or call support and have them walk you thru the steps based upon management buy-in and a decided set of rules.

Wait until you set up the firewall - it's even more powerful and has even more features that will need a similar approach in order to know you are protected. McAfee products are not a place to be guessing, after all.
0
 
LVL 56

Expert Comment

by:McKnife
ID: 39942088
I can only fully agree.
You need to be aware not only what setting that would be, but what consequences it would mean for overall security.

If you need to find that setting and no one here knows it, open a ticket with McAfee support.
0
 

Author Comment

by:space_time
ID: 39949845
Thanks for tip.  McAfee support was my next port of call.  To clarify, this is not a new mcafee setup, but a new workstation setup.  The av policies are historic and have not caused a problem like this in the past.  I am familiar with the configuration of the suite and epo, but I think this particular problem is to do with the way Outlook works in this particular version.  Will get ticket open Mcafee and see if I get a solution.  Will post what I get back here.  Cheers
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 13

Expert Comment

by:Norm Dickinson
ID: 39949894
Thanks for the update! Please post the resulting solution here if you don't mind so that others will be able to find it from searching the knowledge base.
0
 

Accepted Solution

by:
space_time earned 0 total points
ID: 39966747
Ok here is my update and its one of those 'smacks head against keyboard' answers.  There was nothing wrong with the epo or virusscan.  The same policy was applied to 2 machines and was only a problem on 1.  I figured the problem was access protection as when disabling it on the non-working machine the problem went away.

The difference between the machines was the Internet Explorer version.  The working machine was on IE9 and the non-working IE11.  At first I dropped IE down to 10 and still no luck but going further to 9 got it working.  Microsoft changed something fundamental in how Outlook uses IE between 9 and 10.  I don't know what but I'll have to stick with 9 for the moment.  Its annoying because the assumption is that IE 10/11 would be more secure than 9.  Apparently this is not the case.

Thanks to all who helped.
0
 
LVL 13

Expert Comment

by:Norm Dickinson
ID: 39966759
You would probably need to add a site or sites to the trusted site list. IE11 has some inherent trust issues and this will resolve the issue should you run into it again.
0
 

Author Closing Comment

by:space_time
ID: 39979847
Solved and understood this particular problem with this answer.  Would still like to know how to update to IE10/11 without making my computer insecure.
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Keystroke loggers have been around for a very long time. While the threat is old, some of the remedies are new!
An introduction to the wonderful sport of Scam Baiting.  Learn how to help fight scammers by beating them at their own game. This great pass time helps the world, while providing an endless source of entertainment. Enjoy!
Learn how to make your own table of contents in Microsoft Word using paragraph styles and the automatic table of contents tool. We'll be using the paragraph styles in Word’s Home toolbar to help you create a table of contents. Type out your initial …
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question