02-02-2013 09:14 AM
I am checking mine security history since last 2 days and I found there are lots of enteries related to "Unauthorized Accessed blocked (Open Process Token)", I have went through with couple of discussions on this forum and I found the replies that norton is blocking the update files, but the issue here is the actor is taskmgr.exe.
So I want to know that Is mine computer is infected with any trojan/virus or any other thing ? Why norton scan is not able to detect and remove that virus.
Attaching screenshot of this issue so please help to find out what is going wrong.
02-02-2013 10:53 AM
This is a case of Norton Product Tamper Protection blocking Windows Taskmanager from accessing a Norton process. This is a legitimate Windows component, not a virus, and no updates are being blocked. Norton is simply preventing an outside agent from gaining access to Norton's operations. This is normal.
02-03-2013 06:17 AM
Thanks for quick reply. I agree this is windows legitimate process but the question here is why task manager is trying to change the norton files after every minute. Sometimes this is logged with google updater.exe, so the question again is why google updater is trying to access/change norton files.
I am worried here because sometimes I have seen that some trojans are using task manager to perform different type of activities.
02-03-2013 07:47 AM
It isn't trying to change it. It is trying to read it, to obtain information to display. It's what it does. The Norton Tamper Protection does not just protect against modification, but against any other kind of interference, including reading the Norton files and processes.