Unauthorized Access Logged (Access Process Data)

jshuhler · ‎12-30-2010

Whenever I open the Security History I see entries that say "Unauthorized Access Logged (Access Process Data)" with a severity of Medium. These are being logged every 3 to 4 seconds for the past ten hours at least and are continuing at the same rate.

It says the Actor is "c:\windows\syswow64\wbem\wmiprvse.exe" and that the Target is C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.4\ccSvcHst.exe"

Is this something I should be concerned about? I've never seen these entries before this morning whenever I have looked at my security history.

Help Norton!

bjm_ · ‎09-07-2008

jshuhler wrote:
Whenever I open the Security History I see entries that say "Unauthorized Access Logged (Access Process Data)" with a severity of Medium. These are being logged every 3 to 4 seconds for the past ten hours at least and are continuing at the same rate.

It says the Actor is "c:\windows\syswow64\wbem\wmiprvse.exe" and that the Target is C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.4\ccSvcHst.exe"

Is this something I should be concerned about? I've never seen these entries before this morning whenever I have looked at my security history.

Help Norton!

http://www.samlogic.net/articles/32-64-bit-windows-folder-x86-syswow64.htm

Please confirm your OS / SP / platform

Should you be concerned. Activity as you report concerns me.

Depends if the wmiprvse.exe file is located in the proper folder. In other cases, wmiprvse.exe may be malicious.

I know less than nothing about malware....so,

Hopefully, Communty will chime in

Thank you

SendOfJive · ‎02-07-2009

Hi jshuhler,

What you describe is a Norton Product Tamper Protection log entry and is not a cause for concern. In the course of normal operations, many programs and processes on your PC will occasionally attempt to access a Norton file or process. In order to prevent any interference from outside agents, Norton will block these attempts. The "Actor" is only blocked from interacting in some way with Norton, and is not otherwise prevented from running normally. The log is simply a record of events involving Norton and other running processes and does not indicate a threat to your system.