Our security software is reporting USB drive read/write requests by PCMonitorSrv.exe on workstations as below:
Date/Time Type Permission Subject Object Operation
11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk5\DR5 Write
11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk2\DR2 Write
11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk4\DR4 Write
11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk3\DR3 Write
11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk1\DR1 Write
These are prohibited by our security software so we receive these reports. Do you know why PCMonitorSrv.exe is trying to read and write from and to USB ports on a workstation. We wonder if these could be malicious attempts to use the webcam.
Any ideas would be gratefully appreciated!
