1 Reply Latest reply: Oct 10, 2013 11:30 AM by rmetzger RSS

    In OAS log action blocked : create

    patty.d00

      Can you tell me what this means?  In the oas log I see several msgs  action blocked : Create

       

      ex. Blocked by Access Protection rule  NT AUTHORITY\SYSTEM C:\Program Files\DGAgent\DgScan.exe C:\program files\mcafee\virusscan enterprise\repaircache\engine\signlic.txt:6E53BFF5-0001-412b-8407-E3AEDE763511: $DATA Common Standard Protection:Prevent modification of McAfee files and settings Action blocked : Create

       

      Exactly what is oas doing? 

       

      Thanks for any help

        • 1. Re: In OAS log action blocked : create
          rmetzger

          Hi patty.d00,

           

          patty.d00 wrote:

           

          ex. Blocked by Access Protection rule  NT AUTHORITY\SYSTEM C:\Program Files\DGAgent\DgScan.exe C:\program files\mcafee\virusscan enterprise\repaircache\engine\signlic.txt:6E53BFF5-0001-412b-8407-E3AEDE763511: $DATA Common Standard Protection:Prevent modification of McAfee files and settings Action blocked : Create

           

          Exactly what is oas doing? 

          OAS is protecting itself.

          The real question is: What is DgScan.exe doing? Why is DgScan.exe trying to create Alternate Data Streams on signlic.txt?

           

          Ron Metzger