Symantec Tamper Protection Alert - beremote.exe issue - realtime scanning exclusions?

[Edward_Charles]

We've been getting the following errors:

Event Type:   Error

Event Source:           Symantec AntiVirus

Event Category:       None

Event ID:        45

Date:               7/18/2007

Time:              10:38:16 PM

User:               NT AUTHORITY\SYSTEM

Computer:     Server

Description:

 SYMANTEC TAMPER PROTECTION ALERT

Target:  C:\Program Files\VERITAS\Backup Exec\NT\beremote.exe

Event Info:  Suspend Thread

Action Taken:  Blocked

Actor Process:  C:\WINDOWS\System32\svchost.exe (PID 404)

Time:  Wednesday, July 18, 2007  10:38:16 PM

This is causing the backup job just to hang up and fail.

My question is are there any realtime scanning exclusions that would have to be made for Symantec Antivirus to Exclude Symantec Backup exe? Like the entire Program Files\Veritas folder to prevent these issues?

Any suggestions are greatly appreciated.

Thanks

[Joe_Keegan]

We just started experienceing this issue and it seems to be new. Only on one of our servers is expereicing this issue so far and it started on 7/28. Backup have been running fine on this system for a while and nothing has really changed on the systems.

The only suspect is that the volume we use for VSS is full and VSS had trouble creating snapshots so maybe this has something to do with it?

This is a Windows 2003 R2 SP1 system, running Backup Exec 11d and Symantec Antivirus 10.1.5.5000.