Select to view content in your preferred language

Trend Micro Flagging Esri for Ransomware --

1127
5
10-22-2024 10:09 AM
JeffSilberberg
Frequent Contributor

 

Is anyone else seeing this error -- 

JeffSilberberg_0-1729616935181.png

 

 

5 Replies
HaydenWelch
MVP Regular Contributor

It seems to be flagging the indexing server which kinda makes sense. That process indexes your filesystem in the background for ArcPro's internal file manager so you probably just need to create an exception for it.

0 Kudos
JeffSilberberg
Frequent Contributor

 

The Alert is new today.  I have not started Pro in months. As I only need it in the Winter months. 

I will check and see if there is an Esri update to Pro that might fix this -- 

But anything is possible.

0 Kudos
NickN
by
Frequent Contributor

Yep, we started getting Trend Micro alerts flagging both the ArcGISIndexingServer.exe and ArcGISPro.Exe. I've also been attempting to update to 3.3.2 and the C:\Windows\System32\msiexec.exe is also getting flagged and it's showing C:\Users\USERNAME\AppData\Local\ESRI_Licensing\README.txt as the target.

John_Tyll
Occasional Contributor

@JeffSilberberg 

We still have Trend Micro, and it had a rolling update today that was flagging "C:\Program Files\ArcGIS\Pro\bin\ArcGISPro.exe" as a malicious behavior detection, thus not allowing Pro to run.  It started with some end users but made it to the GIS department in about 30 minutes. As this happened just before lunch it took about 2hrs to get whitelisted and pushed out to everyone so they could resume working in ArcGIS Pro. 

 

ColForbin
Frequent Contributor

We had this issue as well 2 days ago and our IT created an exception which solved the issue of opening Pro.  But now we are finding that certain operations are running very slow.  For example, select by attribute, and updating records in enterprise feature classes, the operation is quite laggy and we see a progress bar, even for updating only a 3 or 4 records at a time, which we did not have last week.  Setting up joins, and exporting data is slow as well.

0 Kudos