log window : "unknown flag"

Discussion in 'ProcessGuard' started by gkweb, Nov 28, 2003.

Thread Status:
Not open for further replies.
  1. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    While i was setting up my PG (full version), some executables at start generated some lines in the log window, i gave them "allow flags" consequently.
    One of this line was strange :

    Since i carefully configured PG, i don't have anymore this message (i just got it once). I just wanted to report this in case it could be usefull.
     
  2. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    with my "clean" current configuration, i got this :

    SSM still works normally anyway.
     
  3. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Can you remember what you were doing at the time ? :)
     
  4. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    Can I add another one to that?

    [09:27:30] - [P] - g:\windows\system32\svchost.exe [948] tried to gain Unknown Flag [80000000][00000000 access on g:\windows\system32\csrss.exe [612]


    As far as I know, that was when I started up this morning. Pete
     
  5. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    If i remember right the two times it was just after the startup
    (but i don't have the line after each startup).
     
  6. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Hold tight, a couple of problems which are related :) Jason will be by soon enough to fill us in more
     
  7. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    This after adding Kerio to PG's list:

    [20:45:51] - [T] - c:\windows\system32\csrss.exe [952] tried to gain Unknown Flag [001F03FF][001F03FB access on c:\windows\system32\svchost.exe [1476]
     
  8. Jason_DiamondCS

    Jason_DiamondCS Former DCS Moderator

    Joined:
    Nov 11, 2002
    Posts:
    1,046
    Location:
    Perth, Western Australia
    Thanks guys, this is helpful and should be fixed in the next version.

    -Jason-
     
  9. siliconman01

    siliconman01 Registered Member

    Joined:
    Mar 6, 2003
    Posts:
    780
    Location:
    West Virginia (USA)
    Welcome to DiamondCS Process Guard.
    This program does not need to be running for your system to be protected.

    [04:48:38] - Window Log Started
    [04:57:43] - [T] - c:\windows\system32\csrss.exe [668] tried to gain Unknown Flag [001F03FF][001F03FB access on c:\windows\system32\svchost.exe [1028]

    I get this "unknown flag" when activating MS Outlook 2003. FYI
     
  10. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Yep I think we are going to release a new version very soon since this is fixed and now the log off problem is fixed. Jason must have found it just after I left tonight.. I missed out on the programming fun again ! :D
     
  11. DolfTraanberg

    DolfTraanberg Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    676
    Location:
    Amsterdam
    Ok, I have a simular one:
    [22:24:46] - [P] - c:\program files\symantec\pcanywhere\awhost32.exe [464] tried to gain Unknown Flag [02000000][00000000 access on c:\winnt\explorer.exe [604]

    awhost32.exe has every allowed option enabled
    Dolf
     
Thread Status:
Not open for further replies.