G
Guest
Searching for something else I in my system eventlog (XP Pro) I came across
quite a few warnings with ID: 3004 from WinDefend. They always come in pairs:
1 with "Path Found: driver: <xxx>" and 1 with "Path Found: service: <same
xxx>"
The properties description always starts with "Windows Defender Real-Time
Protection agent has detected spyware or other potentially unwanted software"
Wow, that sounds really serious! I have a 2 questions and a remark about that:
Q1: Why is Defender only logging this in eventlog? I did not get a pop-up or
a "!" in my taskbar and I cannot find anything related to these events in
Defender's History or Software Explorer.
Q2: Appearently this is about drivers/services that are still unknown to WD.
Were they send to Spynet? IS anyone looking into it? One warning that keeps
coming back for several months now is about SiSport, related to the SiS
chipset on this mobo. SiS is not the biggest on the market, but still very
common.
Remark: some of the id 3004 warnings are related to Microsoft products and
services and, like f.i. some ASP.Net performance counter and the
downloadmanager that was used for Vista Beta 2 . IMHO registering a peace of
software in the WD signatures before it gets out into the world should become
part of Microsofts internal procedures.
greetings, Willem
quite a few warnings with ID: 3004 from WinDefend. They always come in pairs:
1 with "Path Found: driver: <xxx>" and 1 with "Path Found: service: <same
xxx>"
The properties description always starts with "Windows Defender Real-Time
Protection agent has detected spyware or other potentially unwanted software"
Wow, that sounds really serious! I have a 2 questions and a remark about that:
Q1: Why is Defender only logging this in eventlog? I did not get a pop-up or
a "!" in my taskbar and I cannot find anything related to these events in
Defender's History or Software Explorer.
Q2: Appearently this is about drivers/services that are still unknown to WD.
Were they send to Spynet? IS anyone looking into it? One warning that keeps
coming back for several months now is about SiSport, related to the SiS
chipset on this mobo. SiS is not the biggest on the market, but still very
common.
Remark: some of the id 3004 warnings are related to Microsoft products and
services and, like f.i. some ASP.Net performance counter and the
downloadmanager that was used for Vista Beta 2 . IMHO registering a peace of
software in the WD signatures before it gets out into the world should become
part of Microsofts internal procedures.
greetings, Willem