• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Access Process Data

This shows up in my scans under "Norton Product Tamper Protection".  (SECURITY: Medium; ACTIVITY: Unauthorized Access Blocked - Access Process Data; STATUS: Blocked; ACTION: No action required or No action available for this item; ACTOR: c:\\windows\system32\wbem\wmiprvse.exe; ACTOR PID; 3512; TARGET: c:\\program files (x86) norton security suite\engine\22.9.0.7\n360.exe; TARGET PID: 3860; ACTION: Access Process Data)

I understand that Norton does "BLOCK" it, so I should not be concerned.  However, I am flooded with this every day.  As an example, I got hit with this 285 times just last night.  Does this mean someone tried to hack into my computer 285 times last night?  If so, this DOES concern me.  I realize they are being blocked, but is there anything I can do to prevent this from happening?  It's overwhelming every time I reconcile my scans and have to sift through all of these.

Replies

Kudos0

Re: Access Process Data

Those messages are from the Norton Product Tamper Protection feature. It protects the Norton product from any possible attempts to access Norton files or processes. Even Windows processes trying to access Norton will be blocked.

Nothing to worry about. Just stop looking at the History unless you really understand what it is saying. It just worries you unnecessarily. The History just logs all activities for help in diagnosing problems.

As long as you see a green check mark in the Norton icon in the system tray, there is no need to check History. 

Things happen. Export/Backup your Identity Safe data.
Kudos0

Re: Access Process Data

Thank you peterweb for your quick reply.

I'm fairly knowledgeable with Norton files and processes (at least I'd like to think so anyway), but in regards to my "Access Process Data" concern, I understood it to mean someone was attempting to access my computer via "a backdoor". I've been receiving the exact same "blocked" log file for the past 6-8 months. Previous to that, everything looked normal. I've just been concerned about who or what is causing this.

In the past, 10-15 years ago, my home computer was hacked. They then proceeded to gain access to my online banking. Since then I have been extremely cautious. Therefore I run / check scans, run maintenance programs etc. on a regular basis to hopefully avoid the past coming back to haunt me.

Again, thanks for your quick reply.

Kudos1 Stats

Re: Access Process Data

c:\\windows\system32\wbem\wmiprvse.exe is a Windows system file. See the information here...  https://www.neuber.com/taskmanager/process/wmiprvse.exe.html

The Norton Tamper Protection log entries are just showing that for some reason , that Windows process is trying to access a Norton file or process. As I noted already, even Windows processes can try to access Norton files.  Defrag, maybe an example.

In this case I would not be worried.

Things happen. Export/Backup your Identity Safe data.

This thread is closed from further comment. Please visit the forum to start a new thread.