NAL detected as being a thread
(Last modified: 30Jan2006)
This document (10100254) is provided subject to the disclaimer at the end of this document.
fact
Symantec AntiVirus 10
Symantec Client Security 3.0
Novell ZENworks 7 Desktop Management - ZfD7
Novell ZENworks 6.5 Desktop Management - ZfD6.5
Novell ZENworks for Desktops 4.0.1 - ZfD4.0.1
Novell Application Launcher (NAL)
symptom
NAL detected as being a thread
Symantec Tamper Protection Alert related to a NALDESK.EXE (ZfD 4.0.1)
change
Symantec Process Tamper Protection enabled
cause
NAL's Rogue Process Management has been configured
NAL scans all running processes at startup (also when Rogue Process Management is not configured).
fix
Currently the only known solution is to disable Symantec Tamper Protection.
As of today, the 24th of January 2006, Symantec states in their online knowledge base that they are currently investigating a solution for the issue that a exclusion list is not available for the Process Tamper Protection feature (Cannot set exclusions for Tamper Protection).
note
Also when NAL's Rogue Process Management is not configured at all, NAL will scan all running process at startup.
The reason is that we deem all running process to be legitimate when started before NAL independent from the inclusion or exclusion list of the Rogue Process Management.
Having a list of all running processes when NAL did start allows us to enable Rogue Process Management later on the fly without stopping processes which have been deemed legitimate.
When NAL's Rogue Process Management has been configured at all (either to terminate all rogue processes or ignore all rogue processes) it will keep scanning the running processes. This will cause Symantec's Process Tamper Protection to alert constantly.
More information about NAL's Rogue Process Management is available in ZENworks 7 Desktop Management documentation at Controlling Rogue Processes.
document
| Document Title: | NAL detected as being a thread |
| Document ID: | 10100254 |
| Solution ID: | NOVL104904 |
| Creation Date: | 24Jan2006 |
| Modified Date: | 30Jan2006 |
| Novell Product Class: | management products |
disclaimer
The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.