Author Topic: "is trying to modify an existing driver or service"  (Read 3146 times)

0 Members and 1 Guest are viewing this topic.

avidgamr

  • Guest
"is trying to modify an existing driver or service"
« on: January 10, 2010, 03:02:31 AM »
Okay, I've been seeing this alert from ZoneAlarm (OSFirewall) quite a bit lately and starting to worry if an infection might be causing this?  :-\ Seems everything wants to modify some part of Avast! Is this normal?  ??? List below is what has been asked of me (not in any particular order):

-------------
Description   UpdateTask.exe was trying to modify an existing driver or service: ASWUPDSV
Rating        High
Date / Time   2009/12/12 16:26:26-5:00 GMT
Type          Driver
Subtype       Modify Driver
Data          ASWUPDSV
Program       C:\Program Files\Ask.com\UpdateTask.exe
Action Taken  Blocked
Count         1
------------
Description   Spooler SubSystem App was trying to modify an existing driver or service: AVAST! ANTIVIRUS
Rating        High
Date / Time   2009/12/12 16:57:34-5:00 GMT
Type          Driver
Subtype       Modify Driver
Data          AVAST! ANTIVIRUS
Program       C:\WINDOWS\system32\spoolsv.exe
Action Taken  Allowed
Count         1
----------------
Description   VirtualDrive VDTask was trying to modify an existing driver or service: AVAST! ANTIVIRUS
Rating        High
Date / Time   2010/01/04 22:18:42-5:00 GMT
Type          Driver
Subtype       Modify Driver
Data          AVAST! ANTIVIRUS
Program       C:\Program Files\FarStone\GameDrive\gdtask.exe
Action Taken  Allowed (once)
Count         1
------------------
Description   KeePass Password Safe 1.17 was trying to modify an existing driver or service: AVAST! ANTIVIRUS
Rating        High
Date / Time   2010/01/09 19:43:30-5:00 GMT
Type          Driver
Subtype       Modify Driver
Data          AVAST! ANTIVIRUS
Program       C:\PROGRAM FILES\KEEPASS PASSWORD SAFE\KeePass.exe
Action Taken  Allowed (once)
Count         1
-------------------
Description   CloneCD Tray was trying to modify an existing driver or service: AVAST! ANTIVIRUS
Rating        High
Date / Time   2009/11/22 11:22:28-5:00 GMT
Type          Driver
Subtype       Modify Driver
Data          AVAST! ANTIVIRUS
Program       C:\PROGRAM FILES\SlySoft\CloneCD\CLONECDTRAY.EXE
Action Taken  Blocked (once)
Count         1
------------------


YoKenny

  • Guest
Re: "is trying to modify an existing driver or service"
« Reply #1 on: January 10, 2010, 11:58:01 AM »
Welcome

One of the problems of using a software firewall is that you have to know how to use it and what is good and what is bad.

Ask.com is bad:
http://hosts-file.net/?s=ask.com&x=27&y=10

Understanding and Using Firewalls
http://www.bleepingcomputer.com/tutorials/tutorial60.html


avidgamr

  • Guest
Re: "is trying to modify an existing driver or service"
« Reply #2 on: January 10, 2010, 02:09:58 PM »
Thanks for the reply!  :)
Yeah, I kinda thought the "ask" toolbar was bad, but why would the others be wanting to modify my anti-virus? I'm afraid I still don't understand. The firewall guide wasn't helpful that I could find... I already knew that much.  ??? Could you put it in "layman's terms" for me (simple words for simple people)?  ;D