Not what you were looking for? Ask our experts!
Reply
Newbie
bagarwal
Posts: 2
Registered: ‎02-02-2013

Unauthorized Accessed blocked (Open Process Token) entry in security history

I am checking mine security history since last 2 days and I found there are lots of enteries related to "Unauthorized Accessed blocked (Open Process Token)", I have went through with couple of discussions on this forum and I found the replies that norton is blocking the update files, but the issue here is the actor is taskmgr.exe.

 

So I want to know that  Is mine computer is infected with any trojan/virus or any other thing ? Why norton scan is not able to detect and remove that virus.

 

Attaching screenshot of this issue so please help to find out what is going wrong.

 

Norton.png

SendOfJive
Posts: 10,595
Kudos: 4,687
Solutions: 760
Registered: ‎02-07-2009

Re: Unauthorized Accessed blocked (Open Process Token) entry in security history

Hi bagarwal,

 

This is a case of Norton Product Tamper Protection blocking Windows Taskmanager from accessing a Norton process.  This is a legitimate Windows component, not a virus, and no updates are being blocked.  Norton is simply preventing an outside agent from gaining access to Norton's operations.  This is normal.

Newbie
bagarwal
Posts: 2
Registered: ‎02-02-2013

Re: Unauthorized Accessed blocked (Open Process Token) entry in security history

Hey,

 

Thanks for quick reply. I agree this is windows legitimate process but the question here is why task manager is trying to change the norton files after every minute. Sometimes this is logged with google updater.exe, so the question again is why google updater is trying to access/change norton files.

 

I am worried here because sometimes I have seen that some trojans are using task manager to perform different type of activities.

Super Spam Squasher
Bombastus
Posts: 1,786
Registered: ‎11-16-2009

Re: Unauthorized Accessed blocked (Open Process Token) entry in security history

It isn't trying to change it. It is trying to read it, to obtain information to display. It's what it does. The Norton Tamper Protection does not just protect against modification, but against any other kind of interference, including reading the Norton files and processes.