1 Reply Latest reply: Apr 18, 2013 3:31 PM by wwarren RSS

    VSE Access Protection blocks itself from updating?

    kjhurni

      I noticed this in my Access Protection logs today, for no apparent reason:

       

      4/5/2013    10:01:47 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Write

      4/5/2013    10:01:47 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner\OpState    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Create

      4/5/2013    10:02:15 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Write

      4/5/2013    10:02:15 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner\OpState    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Create

      4/5/2013    10:02:23 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Write

      4/5/2013    10:02:23 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner\OpState    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Create

      4/5/2013    10:02:24 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Write

      4/5/2013    10:02:24 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner\OpState    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Create

      4/5/2013    2:04:01 PM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\AVEngine\AVDatVersion    Common Standard Protection:Prevent modification of McAfee Scan Engine files and settings    Action blocked : Create

       

       

      This machine has MA 4.6.1 on it, HIPS 8.0.0.2151 and VSE 8.8 Patch 2

       

       

      I'm a bit curious as to why the virusscan task manager isn't allowed to modify it's own code????  Seems rather odd/strange.

       

      Message was edited by: kjhurni on 4/5/13 1:38:49 PM CDT