Norton Internet Security / Norton AntiVirus

[siriusdog]

When I view my security history, there is a message that keeps coming up that says "Unathorized Access Blocked (access process data). Is there anything I can do to stop this message from appearing?

Also, my wireless network has some strange devices on it. I should only have two computers and my iPod on it, but Norton is recognizing four devices. Can I kick the extra one off my network?

[dickevans Super RootKit Eradicator]

---

siriusdog wrote:

When I view my security history, there is a message that keeps coming up that says "Unathorized Access Blocked (access process data). Is there anything I can do to stop this message from appearing?

Also, my wireless network has some strange devices on it. I should only have two computers and my iPod on it, but Norton is recognizing four devices. Can I kick the extra one off my network?

---

Welcome,

If a 'nasty' keeps knocking at the door and Norton keeps saying 'no' I'm not sure you want to make it stop. I bit more information on what the process is might help us understand and explain more completely.

If you don't know, or want, the devices on your network you can restrict them so that they can't do anything. Just deleting them doesn't prohibit them from returning.

Keep us posted

[SendOfJive Norton Fighter]

Hi siriusdog,

The "unauthorized access blocked" log entry pertains to Norton Product Tamper Protection, which prevents any outside agent, even Windows processes, from accessing Norton files or processes.  You can disregard these entries, as they are almost always legitmate programs that simply stray into Norton territory.  The actor is only blocked from interfering with Norton itself, and is otherwise not impeded from running normally.  These entries do not represent threats to your computer.

On your wireless network, check to see if the Phyisical Address showing for the mystery device matches one of the three MAC addresses assigned to your router (WAN, LAN, Wireless LAN).  This is often the case.

[siriusdog]

---

SendOfJive wrote:

Hi siriusdog,

The "unauthorized access blocked" log entry pertains to Norton Product Tamper Protection, which prevents any outside agent, even Windows processes, from accessing Norton files or processes.  You can disregard these entries, as they are almost always legitmate programs that simply stray into Norton territory.  The actor is only blocked from interfering with Norton itself, and is otherwise not impeded from running normally.  These entries do not represent threats to your computer.

On your wireless network, check to see if the Phyisical Address showing for the mystery device matches one of the three MAC addresses assigned to your router (WAN, LAN, Wireless LAN).  This is often the case.

---

So I can disregard these messages from Norton in the future, even if Norton tells me that it is a medium threat?

As for the MAC, I was able to match the one listed on my wireless router to the one listed in the left of my Network Security Map. The one listed next to my devices doesn't match that, unfortunately. One of the mysterious devices says it's a router manufactured by Netgear, but the one I use is Belkin. The other device doesn't tell me anything, and even when I looked up the MAC, I never could find anything. Should I be worried?

Thanks for all your help!

[SendOfJive Norton Fighter]

---

siriusdog wrote:

So I can disregard these messages from Norton in the future, even if Norton tells me that it is a medium threat?

---

 Yes. 

As to your mystery device (it is only one device isn't it?) is the Physical (MAC) Address one digit off from the MAC address of the router?  Please disregard all devices that are accounted for - that information only muddies the waters.  I would not be worried about it - I have yet to see a situation like this that didn't have a simple explanation.  If your wireless is encrypted, it would be virtually impossible for the network to be hacked by a neighbor.  Have you ever used the computer on a different wireless network?

[siriusdog]

Actually I have two mystery devices. They both have completely different physical addresses from the router I know I am using. However, Norton calls one of the mystery devices a "Generic Device" and gives me an IP address similar to my own. The other device doesn't give me an IP address.

I've owned this computer for about nine months and I can't remember any time that I used it outside my house.

Thanks again for all your help!