Can I have an explanation of the following line that appears in Alerts & Logs / OSFirewall:Type
= Modify Driver
Specifically what does Modify Driver mean. It suggests to me that Windows Update has download and installed a new mrxsmb.sys driver.
I m a bit worried and puzzled because although the service Automatic Updates is on Automatic and is Started - I have Turn off Automatic Updates checked in System Properties / Automatic Updates. I specifically checked that box a long time ago, as I don t want Microsoft s automatic buggy security fixes.
I did a search on files created/modified in the past two days and found a WindowsUpdate.log . I appears to just show initialization and shutdown, it doesn t show any update activity and suggests the feature is off.
One other thing while I m on about driver messages:
Frequently at Windows boot time immediately after logon - I can get a ZA Alert saying a program ( the program in question usually varies each time) is trying to remove or install/modify the SysInternal s Process Explorer low level driver (forget the name, something like proc90). Could this be a program putting its hook in some interrupt/address chain. I don t think so, as one of the programs causing the alert is
E-mail notifier. I would see no reason for it to have any connection with SysInternal s driver or any driver.
Operating System:Windows XP Pro
Product Name:ZoneAlarm Pro