JR-Encinitas Posted November 3, 2020 Posted November 3, 2020 Our security software is reporting USB drive read/write requests by PCMonitorSrv.exe on workstations as below: Date/Time Type Permission Subject Object Operation  11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk5\DR5 Write 11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk2\DR2 Write 11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk4\DR4 Write 11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk3\DR3 Write 11/2/2020 20:07:30 USB Read C:\Program Files\PC Monitor\PCMonitorSrv.exe \Device\Harddisk1\DR1 Write  These are prohibited by our security software so we receive these reports. Do you know why PCMonitorSrv.exe is trying to read and write from and to USB ports on a workstation. We wonder if these could be malicious attempts to use the webcam. Any ideas would be gratefully appreciated!  Â
Colm Whelan Posted November 11, 2020 Posted November 11, 2020 I know this is late but you'd need to post this in RMM not PSA.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now