symantec endpoint protection windows 10 1709

The only time I have observer IE11 x(64) spawn a x(86) child process is when a URL exists in 'Trusted Web Sites' section and the default EPM setting of 'off' exists. To date, I have never see this IE11 x(86) spawned child process behavior when reading a. However, that IE11 instance is running in AppContainer. This in itself not suspect because IE11 x(64) child process does the same. I then got an Eset HIPS alert that IE11 x(86) wanted to modify Adobe Reader. IE11 spawned a 'virtualized' 32 bit process running at low IL. īelow is a screen shot of what occurred for me and I have never seen anything like it. Leave it to Comodo to come up with a 'doozy.' Check out this.

So I might try a reinstall specifically blocking this Chrome 'core' baloney and see if it will allow the rest of Reader DC to install here is something to check out. I remember receiving an alert during the Reader installation about it wanting to install Chrome 'core' installation components although I had specifically unchecked all options presented on the installer startup screen. exe startup activity from %AppData%/Local/Temp directory. I didn't mention this previously, but I did reinstall this lastest Reader DC version. There might be a way to stop this however. Now the question is why is something clearly Chrome related being loaded when IE11 is being used? This has to be spyware related is the only conclusion I can come up with.

pdf from your browser add-on/plug-in, RdrCEF.exe loads untrusted as shown in the below screen shot: As I posted previously when reader is opened off line, the child process spawned from RdrCEF.exe loads with low integrity.

Symantec endpoint protection windows 10 1709