Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
1253 Views 1 Reply Latest reply: Apr 18, 2013 3:31 PM by wwarren RSS
kjhurni Apprentice 222 posts since
Aug 1, 2005
Currently Being Moderated

Apr 5, 2013 1:38 PM

VSE Access Protection blocks itself from updating?

I noticed this in my Access Protection logs today, for no apparent reason:

 

4/5/2013    10:01:47 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Write

4/5/2013    10:01:47 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner\OpState    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Create

4/5/2013    10:02:15 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Write

4/5/2013    10:02:15 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner\OpState    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Create

4/5/2013    10:02:23 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Write

4/5/2013    10:02:23 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner\OpState    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Create

4/5/2013    10:02:24 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Write

4/5/2013    10:02:24 AM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\Common Files\McAfee\SystemCore\DAInstall.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner\OpState    Common Standard Protection:Prevent modification of McAfee files and settings    Action blocked : Create

4/5/2013    2:04:01 PM    Blocked by Access Protection rule     NT AUTHORITY\SYSTEM    C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe    \REGISTRY\MACHINE\SOFTWARE\McAfee\AVEngine\AVDatVersion    Common Standard Protection:Prevent modification of McAfee Scan Engine files and settings    Action blocked : Create

 

 

This machine has MA 4.6.1 on it, HIPS 8.0.0.2151 and VSE 8.8 Patch 2

 

 

I'm a bit curious as to why the virusscan task manager isn't allowed to modify it's own code????  Seems rather odd/strange.

 

Message was edited by: kjhurni on 4/5/13 1:38:49 PM CDT

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points