apod.exe - ZoneAlarm reports Suspicious Behaviour
Posted: Thu Apr 20, 2006 9:26 pm
Many thanks for apod.exe - I look forward to seeing what will come up as my screen background each day!
I have ZoneAlarm Security Suite (v6.1.744.001) on my PC. ZoneAlarm pops up a warning every day about apod.exe:
Description: Astronomy Picture of the Day was prevented from controlling the keyboard input of the process: C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServer
Rating: High
Date / Time: 2006/04/20 19:03:18+1:00 GMT
Type: Message
Subtype: Access Keyboard
Data: C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequest
Program: C:\Program Files\APOD\apod.exe
Why does apod.exe interact with csrss.exe?
Is apod.exe simulating keystrokes? If so, why?
I have ZoneAlarm Security Suite (v6.1.744.001) on my PC. ZoneAlarm pops up a warning every day about apod.exe:
Description: Astronomy Picture of the Day was prevented from controlling the keyboard input of the process: C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServer
Rating: High
Date / Time: 2006/04/20 19:03:18+1:00 GMT
Type: Message
Subtype: Access Keyboard
Data: C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequest
Program: C:\Program Files\APOD\apod.exe
Why does apod.exe interact with csrss.exe?
Is apod.exe simulating keystrokes? If so, why?