Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
487 Views 1 Reply Latest reply: Oct 10, 2013 11:30 AM by rmetzger RSS
patty.d00 Apprentice 56 posts since
Jan 26, 2010
Currently Being Moderated

Oct 10, 2013 11:01 AM

In OAS log action blocked : create

Can you tell me what this means?  In the oas log I see several msgs  action blocked : Create

 

ex. Blocked by Access Protection rule  NT AUTHORITY\SYSTEM C:\Program Files\DGAgent\DgScan.exe C:\program files\mcafee\virusscan enterprise\repaircache\engine\signlic.txt:6E53BFF5-0001-412b-8407-E3AEDE763511: $DATA Common Standard Protection:Prevent modification of McAfee files and settings Action blocked : Create

 

Exactly what is oas doing? 

 

Thanks for any help

  • rmetzger Champion 566 posts since
    Jan 4, 2005
    Currently Being Moderated
    1. Oct 10, 2013 11:30 AM (in response to patty.d00)
    Re: In OAS log action blocked : create

    Hi patty.d00,

     

    patty.d00 wrote:

     

    ex. Blocked by Access Protection rule  NT AUTHORITY\SYSTEM C:\Program Files\DGAgent\DgScan.exe C:\program files\mcafee\virusscan enterprise\repaircache\engine\signlic.txt:6E53BFF5-0001-412b-8407-E3AEDE763511: $DATA Common Standard Protection:Prevent modification of McAfee files and settings Action blocked : Create

     

    Exactly what is oas doing? 

    OAS is protecting itself.

    The real question is: What is DgScan.exe doing? Why is DgScan.exe trying to create Alternate Data Streams on signlic.txt?

     

    Ron Metzger

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points