10-06-2012 12:16 AM
This is my first message on this forum so if I have made an error in how or where I placed it I could use some corrective advice. For sometime I have known that Norton regularly blocks three programs that are outbound from my computer. These are Windows programs called; svchost.exe, conhost.exe, and C:\Windows\syswow64\wbem\wmiprvse.exe. I have not understood what was going on and could not decide if it was OK or not. Past communications with Norton Support were of no help. Now I find that all these programs are in fact supposed to be there for correct operation of my Windows 7. I figured I needed to make a change in the Firewall settings. But I can find only the conhost.exe which I changed to allow. Now it seems even that may have been unnecessary and ill advised. However, I cannot change it back to "auto" as it was because the only options are block, unblock, and custom, which is a scary mess. So do I need to make changes in Norton to allow these processes to continue unblocked or am I misinterpreting what blocked means on my security history? Plus if it was Ok as it was do I now need to do something special to get the svchost.exe back to auto?
Solved! Go to Solution.
10-06-2012 12:38 AM
Can I suggest you open N360 Settings > Firewall and on the General tab click Reset. The Norton Smart Firewall will automatically create rules as required.
Is what you are seeing logs in your Security History saying "Unauthorized access blocked (Access Process Data)"? All this means is that processes were blocked from accessing Norton Files. The processes will continue to run as normal. This isn't anything to worry about.
Windows 7 x64 SP1 N360v220.127.116.11 NU16 SSR 2013 Secunia PSI SpywareBlaster NoScript MBAM free SAS free