up vote 0 down vote favorite
share [g+] share [fb]

I am running Symantec Endpoint Protection under Windows XP. Even when I click "Disable Symantec Endpoint Protection" on tray-menu, antivirus still doesn't allow to copy files which it finds suspicious. I wonder how to disable Symantec Endpoint Protection antivirus for a while without uninstalling it?

link|improve this question
feedback

2 Answers

up vote 1 down vote accepted

Is it managed by a corporate AV server? Sometimes the ability to disable it is controlled by policy and not something the end user can change even if they are an administrator.

link|improve this answer
Yep, it seems that it is the case. – bublegumm Jun 2 '10 at 13:19
@bublegumn - You can accept this answer as correct if you would like by clicking the check mark icon underneath the voting next to my answer. – MDMarra Jun 2 '10 at 14:55
I wonder if there is a way to turn off this policy – bublegumm Jun 2 '10 at 19:43
Usually if this is mandated from a policy server there is no way to disable it temporarily. You can try disabling the service in msconfig and rebooting, but then you will be completely unprotected. The right way to handle this is ask the administrator of your anti-virus server to make an exception for the files that you would like to copy. – MDMarra Jun 2 '10 at 19:44
feedback
up vote 0 down vote

I believe it's possible to do so (even to script it), by following below steps:

  1. disable all Symantec services
    • Symantec AntiVirus
    • ccEvtMgr
    • ccSetMgr
    • SmcService
    • SNAC
  2. stop those services
  3. kill all Symantec processes
    • smc.exe
    • ccApp.exe
    • Rtvscan.exe
    • ccSvcHst.exe
    • snac.exe

Now do what you want, afterward ensure you revert all steps above to resume protection.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.