

I will run a ProcMon to confirm if any additional processes appear.

Where is the GXHSMService.ex process contained? I searched the server but could not find it. I will request the additional ones to be added. Then I see that the list of processes that you mention is under the McAfee and Windows Defender sections and not SEP. How should the minifilter drivers be treated if any is above the cvmhsm driver? If that doesnt help, maybe run a ProcMon capture and recall a file and see what events come up in the output.

When disabling SEP completely the recalls work successfully.īy configuring and adding all process and folders to the AV exclusion list does not resolve the problem. I have somewhat discussed this topic in the below post that has not clearly answered / resolved my issue.
