×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

MS office regedit and CSA

Unanswered Question

I'm getting many events like below. I'm thinking it might be a legitimate event possibly a macro causing it.


Have you seen office generate these types of events in csa? Should I allow it?


1224 10/28/2005 3:19:57 PM CKTXXXKLXLH1F.corp.keybank.com Alert TESTMODE: The process 'C:\Program Files\Microsoft Office\Office\WINWORD.EXE' (as user NT_A\yarboch) attempted to access 'C:\Program Files\Common Files\Microsoft Shared\Artgalry\cag.exe'. The attempted access was a read (operation = OPEN/READ). The operation would have been denied. Details Rule 1004 Wizard

1222 10/28/2005 3:19:56 PM CKTXXXKLXLH1F.corp.keybank.com Alert TESTMODE: The process 'C:\Program Files\Microsoft Office\Office\WINWORD.EXE' (as user NT_A\yarboch) attempted to access 'C:\WINNT\regedit.exe'. The attempted access was a read (operation = OPEN/READ). The operation would have been denied. Details Rule 1004 Wizard

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Actions

This Discussion