PDA

View Full Version : AdAware



JJJJJ
05-11-2004, 05:52 AM
I have just ran a full scan with NAV. Nothing found!
I was looking at the NAV files and I noticed seventeen entries for yesterday. They all said "Lavasoft AdAware, unauthorised access, Access stopped"
Does this mean that NAV is not allowing adaware to do it's job properly? Or does it mean that adaware is trying to get into areas it is not allowed to be in?
Jack

Murray P
05-11-2004, 08:10 AM
Sounds like the former Jack, can you post the log?

Cheers Murray P

Greg S
05-11-2004, 08:22 AM
My guess is that you have auto update enabled?

JJJJJ
05-11-2004, 08:30 AM
All of the entries are the same

11/4/2004 5:24:17 AM,Unauthorized access logged,<HEAD><title>SymProtect</title></HEAD>Event Details:
Time: 11/4/2004 5:24:17 AM
Actor: C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe (PID=1972)
Target: C:\Program Files\Common Files\Symantec Shared\ccApp.exe (PID=1860)
Action: Unauthorized access
Reaction: Unauthorized access stopped

www.symantec.com ('http://www.symantec.com')

JJJJJ
05-11-2004, 08:33 AM
Yes auto-update is enabled

Pheonix
05-11-2004, 09:28 AM
Just adaware trying to see if the file is "adware". The file it is trying to scan is important to Nortons, so it will not let it scan or tamper with that file. To quote from the info for the file...

" ccapp.exe is a process belonging to Norton AntiVirus 2003. It is responsible for the auto-protect and email checking facilities, both of which will not function correctly if this service is stopped. This program is important for the stable and secure running of your computer and should not be terminated."

Graham L
05-11-2004, 01:06 PM
And NAV might be very sensitive because "smart" malware tries to disble things like NAV. :D

JJJJJ
05-11-2004, 01:47 PM
Well it looks like I've nothing to worry about.
Guess I'll just stop reading NAV log files.
Jack

Graham L
05-11-2004, 01:55 PM
Always look at the log files. But you don't have to assume that the sky is falling. ;-) NAV is meant to be paranoid.