Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am running Symantec Endpoint Protection under Windows XP. Even when I click "Disable Symantec Endpoint Protection" on tray-menu, antivirus still doesn't allow to copy files which it finds suspicious. I wonder how to disable Symantec Endpoint Protection antivirus for a while without uninstalling it?

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

Is it managed by a corporate AV server? Sometimes the ability to disable it is controlled by policy and not something the end user can change even if they are an administrator.

share|improve this answer
    
Yep, it seems that it is the case. –  bublegumm Jun 2 '10 at 13:19
    
@bublegumn - You can accept this answer as correct if you would like by clicking the check mark icon underneath the voting next to my answer. –  MDMarra Jun 2 '10 at 14:55
    
I wonder if there is a way to turn off this policy –  bublegumm Jun 2 '10 at 19:43
    
Usually if this is mandated from a policy server there is no way to disable it temporarily. You can try disabling the service in msconfig and rebooting, but then you will be completely unprotected. The right way to handle this is ask the administrator of your anti-virus server to make an exception for the files that you would like to copy. –  MDMarra Jun 2 '10 at 19:44
add comment

I believe it's possible to do so (even to script it), by following below steps:

  1. disable all Symantec services
    • Symantec AntiVirus
    • ccEvtMgr
    • ccSetMgr
    • SmcService
    • SNAC
  2. stop those services
  3. kill all Symantec processes
    • smc.exe
    • ccApp.exe
    • Rtvscan.exe
    • ccSvcHst.exe
    • snac.exe

Now do what you want, afterward ensure you revert all steps above to resume protection.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.