I was doing the eicar test by running the process monitor. as expected VSE found that notepad file infected and deleted it from the system.
My question is
> Explorer.exe is creating the create file events for eicar.txt which is expected.
> but why McShiled.exe is doing the create a file operation ?
Any feedback will be appreciated
Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center
2821 Mission College Blvd.
Santa Clara, CA 95054 USA
Consumer Support | Enterprise Support | McAfee.com
Legal | Privacy | Copyright © 2019 McAfee, LLC