Dell Endpoint Security Suite Enterprise ve McAfee Her Önyüklemede CylanceSvc.exe Sırasında Uyarı Verebilir
Summary: Advanced Threat Prevention ı McAfee Güvenlik Duvarı ile kullanırken her önyüklemede Cylancesvc.exe çeşitli McAfee işlemlerine erişmeye çalıştığını belirten uyarılar görebilirsiniz. Bu uyarılar, uyarı ayarlarına bağlı olarak e-posta uyarıları oluşturabilir. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
Not:
- Mayıs 2022 itibarıyla Dell Endpoint Security Suite Enterprise'ın Bakım Sonuna ulaşılmıştır. Bu makale artık Dell tarafından güncelleştirilmeyecektir. Daha fazla bilgi için Dell Data Security için Ürün Yaşam Döngüsü (Destek Sonu/Kullanım Ömrü Sonu) Politikası başlıklı makaleye başvurun. Alternatif makaleler hakkında sorularınız varsa satış ekibinizle ya da endpointsecurity@dell.com adresiyle iletişime geçin.
- Mevcut ürünler hakkında daha fazla bilgi için bkz. Endpoint Security.
Etkilenen Ürünler:
- Dell Endpoint Security Suite Enterprise
Etkilenen Sürümler:
- v2.8 - 2.9

Olaylar C:\Programdata\Dell\Dell Data Protection\DellAgent.log aşağıdakine benzer girişler olabilir:
[04912] (00008) W AVAS : NT AUTHORITY\SYSTEM ran C:\Program Files\Dell\Dell Data Protection\Advanced Threat Protection\CylanceSvc.exe, which attempted to access the process mfefw.exe, violating the rule "Core Protection - Protect McAfee processes from unauthorized access and termination", and was blocked. For information about how to respond to this event, see KB85494. [04912] (00007) W AVAS : received Information threat protection event: BO=SP Id=1092 [04912] (00007) W AVAS : NT AUTHORITY\SYSTEM ran C:\Program Files\Dell\Dell Data Protection\Advanced Threat Protection\CylanceSvc.exe, which attempted to access the process mfewc.exe, violating the rule "Core Protection - Protect McAfee processes from unauthorized access and termination", and was blocked. For information about how to respond to this event, see KB85494. [04912] (00004) W AVAS : received Information threat protection event: BO=SP Id=1092 [04912] (00004) W AVAS : NT AUTHORITY\SYSTEM ran C:\Program Files\Dell\Dell Data Protection\Advanced Threat Protection\CylanceSvc.exe, which attempted to access the process mfeesp.exe, violating the rule "Core Protection - Protect McAfee processes from unauthorized access and termination", and was blocked. For information about how to respond to this event, see KB85494. [04912] (00007) W AVAS : received Information threat protection event: BO=SP Id=1092 [04912] (00007) W AVAS : NT AUTHORITY\SYSTEM ran C:\Program Files\Dell\Dell Data Protection\Advanced Threat Protection\CylanceSvc.exe, which attempted to access the process mfewch.exe, violating the rule "Core Protection - Protect McAfee processes from unauthorized access and termination", and was blocked. For information about how to respond to this event, see KB85494.
Komutta McAfee SelfProtection_Activity.log aşağıdaki gibi girişlere sahip olabilir:
mfeesp(7716.9896) ApBl.SP.Activity: NT AUTHORITY\SYSTEM ran CYLANCESVC.EXE, which attempted to access MFEWC.EXE, violating the rule "Core Protection - Protect McAfee processes from unauthorized access and termination", and was blocked. For information about how to respond to this event, see KB85494. mfeesp(7716.9896) ApBl.SP.Activity: NT AUTHORITY\SYSTEM ran CYLANCESVC.EXE, which attempted to access MFEESP.EXE, violating the rule "Core Protection - Protect McAfee processes from unauthorized access and termination", and was blocked. For information about how to respond to this event, see KB85494. mfeesp(7716.9896) ApBl.SP.Activity: NT AUTHORITY\SYSTEM ran CYLANCESVC.EXE, which attempted to access MFEFW.EXE, violating the rule "Core Protection - Protect McAfee processes from unauthorized access and termination", and was blocked. For information about how to respond to this event, see KB85494. mfeesp(7716.9900) ApBl.SP.Activity: SPRINGSCREATIVE\jcampbe-la ran IE4UINIT.EXE, which tried to access HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\ENABLE BROWSER EXTENSIONS, violating the rule "Web Control - Protect plug-in registry keys and values", and was blocked. For information about how to respond to this event, see KB85494.
Cause
McAfee'den gelen imzalama sertifikası, Cylance sertifikası ile uyumlu değildir ve bir güncelleştirme gerektirir.
Resolution
Sorun, Windows için Dell Endpoint Security Suite Enterprise v3.0'da çözülmüştür.
Destek ile iletişime geçmek için Dell Data Security Uluslararası Destek Telefon Numaraları başlıklı makaleye başvurun.
Çevrimiçi olarak teknik destek talebi oluşturmak için TechDirect adresine gidin.
Daha fazla faydalı bilgi ve kaynak için Dell Security Topluluk Forumu'na katılın.
Affected Products
Dell Endpoint Security Suite EnterpriseArticle Properties
Article Number: 000189881
Article Type: Solution
Last Modified: 10 Jul 2024
Version: 10
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.