"is trying to modify an existing driver or service"

Okay, I’ve been seeing this alert from ZoneAlarm (OSFirewall) quite a bit lately and starting to worry if an infection might be causing this? :-\ Seems everything wants to modify some part of Avast! Is this normal? ??? List below is what has been asked of me (not in any particular order):


Description UpdateTask.exe was trying to modify an existing driver or service: ASWUPDSV
Rating High
Date / Time 2009/12/12 16:26:26-5:00 GMT
Type Driver
Subtype Modify Driver
Data ASWUPDSV
Program C:\Program Files\Ask.com\UpdateTask.exe
Action Taken Blocked
Count 1

Description Spooler SubSystem App was trying to modify an existing driver or service: AVAST! ANTIVIRUS
Rating High
Date / Time 2009/12/12 16:57:34-5:00 GMT
Type Driver
Subtype Modify Driver
Data AVAST! ANTIVIRUS
Program C:\WINDOWS\system32\spoolsv.exe
Action Taken Allowed
Count 1

Description VirtualDrive VDTask was trying to modify an existing driver or service: AVAST! ANTIVIRUS
Rating High
Date / Time 2010/01/04 22:18:42-5:00 GMT
Type Driver
Subtype Modify Driver
Data AVAST! ANTIVIRUS
Program C:\Program Files\FarStone\GameDrive\gdtask.exe
Action Taken Allowed (once)
Count 1

Description KeePass Password Safe 1.17 was trying to modify an existing driver or service: AVAST! ANTIVIRUS
Rating High
Date / Time 2010/01/09 19:43:30-5:00 GMT
Type Driver
Subtype Modify Driver
Data AVAST! ANTIVIRUS
Program C:\PROGRAM FILES\KEEPASS PASSWORD SAFE\KeePass.exe
Action Taken Allowed (once)
Count 1

Description CloneCD Tray was trying to modify an existing driver or service: AVAST! ANTIVIRUS
Rating High
Date / Time 2009/11/22 11:22:28-5:00 GMT
Type Driver
Subtype Modify Driver
Data AVAST! ANTIVIRUS
Program C:\PROGRAM FILES\SlySoft\CloneCD\CLONECDTRAY.EXE
Action Taken Blocked (once)
Count 1

Welcome

One of the problems of using a software firewall is that you have to know how to use it and what is good and what is bad.

Ask.com is bad:
http://hosts-file.net/?s=ask.com&x=27&y=10

Understanding and Using Firewalls
http://www.bleepingcomputer.com/tutorials/tutorial60.html

Thanks for the reply! :slight_smile:
Yeah, I kinda thought the “ask” toolbar was bad, but why would the others be wanting to modify my anti-virus? I’m afraid I still don’t understand. The firewall guide wasn’t helpful that I could find… I already knew that much. ??? Could you put it in “layman’s terms” for me (simple words for simple people)? ;D