Please Sign In with Norton Account to Ask a Question or comment in the Community
I'm trying to setup a printer driver I downloaded from the Liene website, but I keep getting this message "Data Protector blocked suspicious action by Liene photo printer 1.2.tmp" I wonder why I'm seeing this message? I downloaded the driver from Liene's web site at: https://global.liene-life.com/pages/download.
Posted: 12-Feb-2022 | 7:01AM · Edited: 12-Feb-2022 | 7:08AM · Permalink
appears...Norton Data Protector objects to .tmp file created by installer
Note: I've needed to temporarily turn off Data Protector to install programs. Just saying.
Posted: 12-Feb-2022 | 7:10AM · Edited: 12-Feb-2022 | 7:14AM · Permalink
Note: excluding the main executable does not satisfy Norton.
Data Protector still objects to the .tmp file created by installer.
Posted: 12-Feb-2022 | 7:14AM · Permalink
Category: Data Protector
Date & Time,Risk,Activity,Status,Recommended Action,Status - Details,Program Path,Program Name,Date & Time - Details,Action Observed,Target
2/12/2022 10:07:36 AM,High,Data Protector blocked a suspicious action by liene_photo_printer_1.2.tmp,Action Blocked,No Action Required,Action Blocked,C:\Users\bjm\AppData\Local\Temp\is-GRAUF.tmp\liene_photo_printer_1.2.tmp,liene_photo_printer_1.2.tmp,2/12/2022 10:07:36 AM,Suspicious process attempted to modify attributes of a file protected by Data Protector,C:\ProgramData\Microsoft\Windows\DeviceMetadataStore\EN\is-AO3AE.tmp
2/12/2022 10:07:36 AM,High,Data Protector blocked a suspicious action by liene_photo_printer_1.2.tmp,Action Blocked,No Action Required,Action Blocked,C:\Users\bjm\AppData\Local\Temp\is-GRAUF.tmp\liene_photo_printer_1.2.tmp,liene_photo_printer_1.2.tmp,2/12/2022 10:07:36 AM,Suspicious process attempted to modify attributes of a file protected by Data Protector,C:\Windows\is-QQBKO.tmp
2/12/2022 10:04:59 AM,High,Data Protector blocked a suspicious action by liene_photo_printer_1.2.tmp,Action Blocked,No Action Required,Action Blocked,C:\Users\bjm\AppData\Local\Temp\is-4RPIH.tmp\liene_photo_printer_1.2.tmp,liene_photo_printer_1.2.tmp,2/12/2022 10:04:59 AM,Suspicious process attempted to modify attributes of a file protected by Data Protector,C:\ProgramData\Microsoft\Windows\DeviceMetadataStore\EN\is-TPAMV.tmp
2/12/2022 10:04:59 AM,High,Data Protector blocked a suspicious action by liene_photo_printer_1.2.tmp,Action Blocked,No Action Required,Action Blocked,C:\Users\bjm\AppData\Local\Temp\is-4RPIH.tmp\liene_photo_printer_1.2.tmp,liene_photo_printer_1.2.tmp,2/12/2022 10:04:59 AM,Suspicious process attempted to modify attributes of a file protected by Data Protector,C:\Windows\is-THP4L.tmp
2/12/2022 9:58:16 AM,High,Data Protector blocked a suspicious action by liene_photo_printer_1.2.tmp,Action Blocked,No Action Required,Action Blocked,C:\Users\bjm\AppData\Local\Temp\is-OHI0P.tmp\liene_photo_printer_1.2.tmp,liene_photo_printer_1.2.tmp,2/12/2022 9:58:16 AM,Suspicious process attempted to open a file protected by Data Protector,C:\Windows\unins000.dat
Posted: 12-Feb-2022 | 7:17AM · Edited: 12-Feb-2022 | 7:26AM · Permalink
fwiw ~ OSArmor Passive Logging: appears the .tmp file is unsigned. No idea if that's why Norton objects to the .tmp file created by installer.
Date/Time: 2/12/2022 10:15:23 AM
Process: [8600]C:\Users\bjm\AppData\Local\Temp\is-MUVR2.tmp\liene_photo_printer_1.2.tmp
Process MD5 Hash: D4EE1484D2CAE8A46893FBC4E7337F3A
Parent: [8488]C:\Users\bjm\Desktop\liene_photo_printer\liene_photo_printer_1.2.exe
Rule: BlockUnsignedProcessesAppDataLocal
Rule Name: Block execution of unsigned processes on Local AppData
Command Line: "C:\Users\bjm\AppData\Local\Temp\is-MUVR2.tmp\liene_photo_printer_1.2.tmp" /SL5="$1A068C,1464734,861696,C:\Users\bjm\Desktop\liene_photo_printer\liene_photo_printer_1.2.exe" /SPAWNWND=$B30448 /NOTIFYWND=$33050C
Signer: <NULL>
Parent Signer: Hannto Technology Co., Ltd.
User/Domain: bjm/DESKTOP-DELL
System File: False
Parent System File: False
Integrity Level: High
Parent Integrity Level: High
Posted: 12-Feb-2022 | 7:22AM · Edited: 12-Feb-2022 | 7:25AM · Permalink
and with Norton Data Protector temporarily off. Driver installation appears to proceed with Install.
as always, your mileage may vary
Posted: 12-Feb-2022 | 7:46AM · Permalink
Thank you bjm_, for your reply. This worked, and I got the driver setup. I didn't know if I should be cutting Data Protection off or not so thanks for your help!
Posted: 12-Feb-2022 | 7:59AM · Edited: 12-Feb-2022 | 8:06AM · Permalink
T Brian:Thank you bjm_, for your reply. This worked, and I got the driver setup. I didn't know if I should be cutting Data Protection off or not so thanks for your help!
Please remember to turn Data Protector on after install and monitor.
Please post back if needed.
I've had to temporarily turn off Data Protector for trusted installs. Just me. Just saying.
Posted: 12-Feb-2022 | 8:05AM · Permalink
adding related content for users that pass this way
Filename: liene_photo_printer_1.2.exe
Full Path: C:\Users\bjm\Desktop\liene_photo_printer\liene_photo_printer_1.2.exe
Developers
Hannto Technology Co., Ltd.
Version
1.2.0.0
Identified
2/12/2022 at 9:58:05 AM
Last Used
2/12/2022 at 10:22:46 AM
Startup Item
No
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
Very New
This file was released less than 1 week ago.
Good
Norton has given this file a favorable rating.
Source File:
liene_photo_printer_1.2.exe
File Thumbprint - SHA:
e6df695dc5c49da49ce7b9cad2eff0edb66a4050911010382f07a7c236dc447c
File Thumbprint - MD5:
1e160fdc1168e961085771409e4de7e4
Re: Liene photo printer, print driver setup
Posted: 12-Feb-2022 | 7:22AM · Edited: 12-Feb-2022 | 7:25AM · Permalink
and with Norton Data Protector temporarily off. Driver installation appears to proceed with Install.
as always, your mileage may vary