• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Receiving message Unauthorized access logged(Access thread data)

For a few weeks now I have been getting this message in security history details: unauthorized access logged (Access thread data)

it says status logged and no action required, threat severity is medium. In advanced details it shows as follows:

Actor:  C:\windows\system32\services.exe

Actor PID: 576

Target: C:\ProgramFiles\Norton360\Engine\3.0.0 .135\ccSvcHst.exe

Target PID: 420

Action: Access thread data

Reaction: unauthorized access logged 

My processor goes a bit wild sometimes also when I'm not actually doing anything on the computer.

and the last couple of days I have noticed that identity safe cards and log-ins icon is showing an open  icon.

Can someone please give me some advice quickly, I dare not log into anywhere as it seems to me highly likely that someone has gained access to my computer.

[edit: Changed subject to reflect issue.]

Message Edited by shannons on 06-15-2009 06:10 AM

Replies

Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

For a few weeks now I have been getting this message in security history details: unauthorized access logged (Access thread data)

it says status logged and no action required, threat severity is medium. In advanced details it shows as follows:

Actor:  C:\windows\system32\services.exe

Actor PID: 576

Target: C:\ProgramFiles\Norton360\Engine\3.0.0 .135\ccSvcHst.exe

Target PID: 420

Action: Access thread data

Reaction: unauthorized access logged 

My processor goes a bit wild sometimes also when I'm not actually doing anything on the computer.

and the last couple of days I have noticed that identity safe cards and log-ins icon is showing an open  icon.

Can someone please give me some advice quickly, I dare not log into anywhere as it seems to me highly likely that someone has gained access to my computer.

[edit: Changed subject to reflect issue.]

Message Edited by shannons on 06-15-2009 06:10 AM
Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

i get them as well and i just ignore them
Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

The message is stating that some outside (of the Norton Process) process is trying to access Norton's files and Norton has blocked it.  This is normal and everything is all right.

The going wild might be the background scanning being done by N360 to process Insight scans and Community Watch submissions.  N360 will also run background scans on the file system periodically.

Depending on how you have the Identity Safe login configured, the open symbol is normal.  You are still protected as your IDs are locked if the symbol is open.

Win10 x64; Proud graduate of GeeksToGo
Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

Well you might not be bothered about it, but I'm very concerned so much so that I'm thinking of uninstalling my norton 360 and getting kaspersky internet security. All I keep hearing is negative comments about norton and I'm beginng to believe them. there seems to be a lot of problems, not just for me but looking at this community forum there are many problems. I am really angry about this, I expected to be protected by a product that is supposed to be up there with the best so I'm told, and I'm not seeing this. I am hoping that someone with some expert knowledge will be able to help me with this problems, before I uninstall this software and seek an alternative protection.
Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

Thankyou dbrisendine I just see your message, it put my mind at rest a little, but how do I find out who is trying to gain access to my computer and just how normal is this? Is there some software or something I can use to try to track whoever is trying to gain access to my computer, they have been repeated attempts for the last at least two weeks so this person is persistent. I was worried about the icon as it was never like that before, as far as I'm aware I never changed configuration of identity safe. I wish I was more knowledgeable in all this but it's way above my head.
Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

Everything that you described in the original post is N360 protecting itself and you.  The log entry is just a notification that one of window's services tried to access N360's process directly and that is not allowed.  Nothing is allowed to directly or indirectly tamper with N360's processes.  I don't beleive that this is from an outside attack; MS Windows normally looks at processes that are running on a system.  N360 is just protecting it's internal processes from any attempts and makes exceptions to that rule (least something bad mimic Windows, say) .

As to the "wild" processor, this could be the Idle Time background processes of N360 running to check files while you are not actively using the system.  Norton does this to keep you protected but not bother or burden the system while you have it active.  In the bottom right hand corner is a little symbol the looks like a bar graph.  If you click on this a chart / report window will open that reports the CPU Usage and status of N360's background processes.

As to the Identity Safe icon, what is the setting for staying logged into or logging out of Identity Safe?  If you have left this at the default setting then, this should be open if you log out of your window's user account and wait for you to log back into Identity Safe.

If you are concerned that your system has been compromised, then please run a full system scan and report the results here.  If anything is found wrong, help is available to correct the problem.  Also, If you are concerned that N360 may be malfunctioning, then run a One Click Support routine which will check the internal working of N360 and correct any problems found.  One Click Support is found under the Help & Support menu on the main page.

Message Edited by dbrisendine on 06-15-2009 11:22 AM
Win10 x64; Proud graduate of GeeksToGo
Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

If possible I would like further advice from symantec employee.
Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

o.k I will try one click support, thanks
Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

I Also Get This. but there is rarely nothing to worry obout, due to norton. It is very likely that norton blocked it, though. I would ignore this. And identity safe, It sometimes logs you out time-to-time. So, It seems very unlikely that someone gained access to your computer. If someone did, I would Check your firewall settings. And also check norton settings. some things might be turned off. And do a full-system scan, just in case. There might be spyware/Malware on your computer.
Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

Hi Reactivate,

 

This is already discussed in the following thread (SOLVED):

http://community.norton.com/norton/board/message?board.id=nis_feedback&message.id=28660

 

Yogesh

Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

Since mid-July Norton Internet Security's intrusion protection started rebooting my computer after various "unauthorized access blocked" messages due to Webroot's spysweeper.exe

I excluded (unchecked) spysweeper.exe from intrusion protection, but still get "unauthorized access logged (Access process data)" messages and they are always blamed on spysweeper.  

If I walk away from my computer for any length of time, I find it has shut down and rebooted and there's a new message from Norton.

I do not use Webroot's antivirus (which is disabled)-- only their adware/spyware checker. 

I really hate being in the middle of battle between Norton and Webroot for control of my computer. 

As a long-time user of both I'm not sure which program I'm going to discard.  

Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

Benitocellini:

As Dbrisendine explained on the previous page, it is not the intrusion prevention that is causing the issue, it is tamper protection.  Norton is designed so that malware can not modify its settings.  When Webroot insists on scanning it or trying to access Norton's files, it is prevented from doing so.  Most programs access Norton from time to time and are refused.  They give in gracefully to the refusal.  Webroot is obviously not stopping the activity that is triggering the Norton response.

Symantec is not likely to remove the tamper prevention that protects the computer from malicious intervention.  You could be equally annoyed at Webroot for not backing away when refused as oher programs do.

Under certain circumstances profanity provides relief denied even to prayer.Mark Twain
Kudos0

Re: Receiving message Unauthorized access logged(Access thread data)

Benitocellini,

I am not sure that Spysweeper being blocked from trying to access Norton processes would cause a system crash.  If the two programs were both accessing system processes simultaneously, or mistakenly identifying each other as malicious, however, you very well could get a Windows crash and reboot.  Could you check the Windows Event Viewer and follow up any error codes that might correspond with the reboots?

This thread is closed from further comment. Please visit the forum to start a new thread.