log window : "unknown flag"

Discussion in 'ProcessGuard' started by gkweb, Nov 28, 2003.

Thread Status:
Not open for further replies.
  1. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    While i was setting up my PG (full version), some executables at start generated some lines in the log window, i gave them "allow flags" consequently.
    One of this line was strange :

    Since i carefully configured PG, i don't have anymore this message (i just got it once). I just wanted to report this in case it could be usefull.
     
  2. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    with my "clean" current configuration, i got this :

    SSM still works normally anyway.
     
  3. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Can you remember what you were doing at the time ? :)
     
  4. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    Can I add another one to that?

    [09:27:30] - [P] - g:\windows\system32\svchost.exe [948] tried to gain Unknown Flag [80000000][00000000 access on g:\windows\system32\csrss.exe [612]


    As far as I know, that was when I started up this morning. Pete
     
  5. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    If i remember right the two times it was just after the startup
    (but i don't have the line after each startup).
     
  6. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Hold tight, a couple of problems which are related :) Jason will be by soon enough to fill us in more
     
  7. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    This after adding Kerio to PG's list:

    [20:45:51] - [T] - c:\windows\system32\csrss.exe [952] tried to gain Unknown Flag [001F03FF][001F03FB access on c:\windows\system32\svchost.exe [1476]
     
  8. Jason_DiamondCS

    Jason_DiamondCS Former DCS Moderator

    Joined:
    Nov 11, 2002
    Posts:
    1,046
    Location:
    Perth, Western Australia
    Thanks guys, this is helpful and should be fixed in the next version.

    -Jason-
     
  9. siliconman01

    siliconman01 Registered Member

    Joined:
    Mar 6, 2003
    Posts:
    786
    Location:
    West Virginia (USA)
    Welcome to DiamondCS Process Guard.
    This program does not need to be running for your system to be protected.

    [04:48:38] - Window Log Started
    [04:57:43] - [T] - c:\windows\system32\csrss.exe [668] tried to gain Unknown Flag [001F03FF][001F03FB access on c:\windows\system32\svchost.exe [1028]

    I get this "unknown flag" when activating MS Outlook 2003. FYI
     
  10. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Yep I think we are going to release a new version very soon since this is fixed and now the log off problem is fixed. Jason must have found it just after I left tonight.. I missed out on the programming fun again ! :D
     
  11. DolfTraanberg

    DolfTraanberg Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    676
    Location:
    Amsterdam
    Ok, I have a simular one:
    [22:24:46] - [P] - c:\program files\symantec\pcanywhere\awhost32.exe [464] tried to gain Unknown Flag [02000000][00000000 access on c:\winnt\explorer.exe [604]

    awhost32.exe has every allowed option enabled
    Dolf
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.