Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
BorisL
Contributor

Cannot edit HOSTS file

Harmony Endpoint Antimalware 86.10 wrongly detects a computer administrator attempting to change the HOSTS file and blocks the change.

Is there a way to bypass this?

 

0 Kudos
7 Replies
G_W_Albrecht
Legend
Legend

The user/admin has  to shutdown EPS locally before the change.

CCSE CCTE CCSM SMB Specialist
0 Kudos
BorisL
Contributor

First. Not possible to give local admins that possibility. What's the purpose of the uninstall password, then? It's like telling someone: "remove your antivirus, then reinstall it" If that is the solution, then we would have to look for another product.

Second. It does not happen in all systems. In 2 out of 3 Windows 10 computers with the Endpoint active, local admin can change HOSTS. 

0 Kudos
G_W_Albrecht
Legend
Legend

Contact TAC to get this resolved ! Looks like a bug. I did not mean to uninstall, only shutdown client...

CCSE CCTE CCSM SMB Specialist
0 Kudos
BorisL
Contributor

Thank you for the interest and help.

But I just spent almost 3 months with TAC on a bug in Harmony Endpoint which wrongfully locked files (finally solved last week). I am not willing to go through that ordeal (tests, zooms, more tests, files back and forth) again... 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

You could pilot E86.25 on one of the machines, else if there is a specific protection being triggered there might be other workarounds available....

CCSM R77/R80/ELITE
0 Kudos
jcortez
Employee
Employee

@BorisL 

It does sound like an issue that needs to be looked at by our Endpoint Tac Teams. This is our process and if it needs a fix, this is the only path.

If you continue to see issues with our client either try our latest version, E86.25, to see if that resolves it or create a SR.


Justin Cortez
Technology Leader | Endpoint Cyber Security Products | Americas Endpoint Team
0 Kudos
BorisL
Contributor

Fix for other problem was applied to 86.10.69 and we were told to upgrade to 86.30 when available. So, maybe, 86.25 will fix one thing and break another one.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events