Symantec Scan Engine deletes clean exeutable files such as the adobe flash player installer installation file.
A container violation has been found
Date/time of event = 2011-10-26 10:23:19 Event Severity Level = Warning URL = aihdownload.adobe.com/bin/install_flashplayer11x32ax_gtbd_aih.exe
File name = install_flashplayer11x32ax_gtbd_aih.exe
File status = BLOCKED
Component name = install_flashplayer11x32ax_gtbd_aih.exe
Component disposition = DELETED
Some executables are encrypted and by default Scan Engine deletes encrypted containers.
To resolve the issue follow these steps:
1. In the Scan Engine console Uncheck/Disable "Delete encrypted containers" in Policies - Filtering - Container Handling
2. Click on Save using the floppy disk icon in the top left
3. Go into services.msc and restart the Symantec Scan Engine service
Symantec Scan Engine 5.2.x