With VirusScan 8.8 Patch 9 (Build 1804) McAfee added an enhanced self protection mechanism. According to KB88263, non McAfee or Microsoft processes are treated as untrusted and will be blocked. That means, own processes cannot disable Access Protection - even if excluded from corresponding access protection rules.
But there should be a way to disable Enhanced Self Protection. BK88263 says: "Uncheck the option Enhanced-Self-Protection to restore pre-Patch 9 behaviour". Where can I find this option?
These are found in the Access Protection policy under "Common Standard Protection." By default they are only set to report, so they will not actively block anything that wasn't blocked before patch 9.
I have a question, since I update my virus scan 8.8 into patch 9(build 1804) I get serious problem. the cpu usage and disk usage of many of my systems increased in order to my systems not working at all and they should restart.
is this problem relate to enhance-self protection option?
The original question is actually different and I have the same!
The KB says "Additionally, for the four original AP rules, a new setting called Enable Enhanced Self-Protection has been added (and enabled by default)." I do not understand it as "remove the checkmark on block column" because these 4 new policies do NOT have the block active by default!
There must be a specific settings, honestly I didn't find it anywhere...