0 Replies Latest reply on Jun 20, 2017 3:49 AM by schrmat

    WMIPRVSE.EXE triggers Access Protection?

    schrmat

      Hello,

       

      I have some servers which trigger a lot of the following threat events:

       

      C:\WINDOWS\SYSTEM32\WBEM\WMIPRVSE.EXE

      tries to access

      HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MCAFEEFRAMEWORK\

       

      Triggered Rule: Common Standard Protection:Prevent modification of McAfee Common Management Agent files and settings

       

      Do you have some knowledge about it?

      There are only two servers which trigger these events.

       

       

      Best regards