I am supporting a local tax office which has 3 tax prep PC’s. 2 PC’s have the tax software installed on the local machine and 1 machine, runs the program from machine 2. They are running Avast Endpoint Protection Plus, Small business edition. I set up the SOA console on PC 2 so they can manage all 3 from one workstation. I set up global exclusions from the console to exclude the file location where JHP.exe lives on the C drive of 2 of the PC’s. PC 1 and PC 2 are standalone installations of the tax program. PC 3 which is the one I am having the issue with, connects to PC 2 to run the program.
So JHP.exe from my understanding is a print executable. When they are ready to print the tax form the program calls to JHP.exe on machine 2 but Avast blocks it and says its malicious. I have uploaded the file to be analysed as a FP but haven’t heard back yet on it. The programs work fine on the two standalone machines but the one PC that uses the program through PC 2 will not work.
Also I added the UNC path from PC 3 to PC 2 in the global exclusions but still flagged the file as malicious.