Our security software is reporting USB drive read/write requests by PCMonitorSrv.exe on workstations as below:

Date/Time Type Permission Subject Object Operation  
11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk5\DR5 Write 
11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk2\DR2 Write 
11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk4\DR4 Write 
11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk3\DR3 Write 
11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk1\DR1 Write 
 

These are prohibited by our security software so we receive these reports.  Do you know why PCMonitorSrv.exe is trying to read and write from and to USB ports on a workstation.  We wonder if these could be malicious attempts to use the webcam.

Any ideas would be gratefully appreciated!

 

 

I know this is late but you'd need to post this in RMM not PSA.