Photoshop causes Windows Defender 3004 warnings in System Log

[Guest]

Photoshop CS (8.0) on WinXP Pro

I've just noticed WinDefend Event ID: 3004 Warnings in the Event
Viewer>System Log every time that Photoshop is started. Photoshop is working
fine but what could cause the 8 to 10 log entries, each with a random driver
name?

Examples:

Event Type: Warning
Event Source: WinDefend
Event Category: None
Event ID: 3004
Date: 12/27/2006
Time: 6:29:22 AM
User: N/A
Computer: NOV04
Description:
Windows Defender Real-Time Protection agent has detected changes. Microsoft
recommends you analyze the software that made these changes for potential
risks. You can use information about how these programs operate to choose
whether to allow them to run or remove them from your computer. Allow
changes only if you trust the program or the software publisher. Windows
Defender can't undo changes that you allow.
For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=74409
Scan ID: {9747D17F-9E03-4BEF-B682-1D8274201D93}
User: NOV04\Administrator
Name: Unknown
ID:
Severity: Not Yet Classified
Category: Not Yet Classified
Path Found: driver:Wscimmeri
Alert Type: Unclassified software
Detection Type:

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

And, here are some subsequent entries:

Scan ID: {19B31F37-C828-4BAD-B9BD-F12C1C0CA7EB}
Path Found: driver:I8pnalrerwds

Scan ID: {7A4A97F5-91B2-4D74-9C02-37961F2D8249}
Path Found: service:I8pnalrerwds

Scan ID: {21BE93FF-CE2C-4190-919E-D6AE7DC7F821}
Path Found: driver:Rassserceavi

Scan ID: {D37CC591-0DA0-4262-B083-D1DF81DD1F90}
Path Found: service:Rassserceavi

Scan ID: {E058352E-93F4-4BE4-98FE-052364DF9592}
Path Found: driver:Flsiervennftr

 

[Guest]

Hello WCoast,

I think you may have to work at excluding Photoshop it from the scan, as an
interim measure.

Tools, Options, scroll down to Advanced options, and fill the box, by adding
the full path and file name to the Tools/Options/ do not scan box, hit the
add button, and Save.

Microsoft does read these groups, and feedback here does get incorporated
into the further work on the product.

For the benefit of the community reading this post, please rate the pºst.

I hope this post is helpful.

Let us know how it works ºut.

Еиçεl

 

[Guest]

These warnings are not the result of a scan, but are entries in the System
Log immediately after starting Photoshop. There are no entries in in Windows
Defender History or Quarantine. Anyone running Photoshop?

 

[Guest]

The driver entries really amount to three since those you have listed are
repetative in two of the five cases you have posted and may not yet appear in
the Spynet database. Do you have the `Advanced Spynet` option selected in
Tools>Microsoft Spynet?

Questions are: Are those drivers part of Adobe? Is WD flagging you in the
notification area for permissions?

Stu

 

[Guest]

Every time Photoshop starts another set of 8 or 10 log entries are produced
in the system log in pairs. Each pair with a unique random driver name and
each individual line with a unique Scan ID. The driver names are random 5-13
letter/number strings, not any part of Adobe AFAIK (and I have submitted this
issue to Adobe as well). Advanced SpyNet has been selected since I noticed
this. All notifications are checked to allow, and now I do get two or three
'A system change was made by a known application' with actual system
filenames but seemingly random as well. And then one more when Photoshop is
closed. Note the log times in the screen grab and the random driver name.

http://www333.pair.com/vooba/pv/WinDef.gif

 

[Guest]

I have Photoshop on my machine. I`ll give it a run and let you know what I
find in the System Event Log ....

Stu

 

[Guest]

Thanks Stu, I'll be very interested.
I just tried Photoshop-6 and Photoshop Elements-2 on a Win2000 system
running Windows Defender with no events recorded.

 

[Guest]

Apologies for the delay in getting back to you. I am not recording any events
on my system which is XP Home SP2.

Stu

 

[Guest]

Thanks for taking a look Stu.
Where can I pursue this issue with Microsoft?

 

[Guest]

Well. Related to WD as it seems to be. Here on these NGs . Watch this space .
Bill? . Engel? Anyone? Even the MSFT`s !!

Stu

 

[Guest]

Here is the response from Adobe.
So, Microsoft, what do these warnings mean?

Thank you for contacting Adobe® Web Support for assistance with Adobe
Photoshop CS2®

I understand that when you run Photoshop, Windows® Defender® generates
errors. You wonder if this is a documented issue with Photoshop.

We have no documentation on Windows Defender. You will need to contact
Microsoft® for information specific to these messages.

Looking at the messages, it appears to me that Windows Defender is
simply alerting you that Photoshop has made some changes to various
files and folders and it is up to you to
decide whether or not Photoshop should be trusted by Windows Defender.

From all the information you have provided, Photoshop is working
normally and there is no cause for concern.