In my install of Norton 360 there are two files that I always change. To do so, you must disable tamper protection temporarily in Norton settings then find the two files shown in the screenshot below. They are located in this directory: C:\Program Files\Norton\Suite
wa_third_party_host_64.exe
wa_third_party_host_32.exe
I renamed both files, one I set to the name 32.exe and the other 64.exe. Then, set the file properties to “read only”, saved, then rebooted. This scenario allows me not to see nearly all the sell-ups that can drive us bonkers as well as steal focus while using our devices. I also DO NOT run Smart Scans for any reason.
These files are tied to scanning for software updates and other updates. Tied to OPSWAT Meta Defender services.
AI Overview
wa_third_party_host_64.exe (often formatted as wa_3rd_party_host_64.exe) is a legitimate 64-bit executable file created by OPSWAT, Inc. as part of their MetaDefender Endpoint Security / OESIS framework. It acts as a host process used by larger software to scan your system and check device health. [1, 2, 3, 4, 5]
What It Does
Device Checks: It collects details about installed security tools, antivirus versions, and system updates.
Network Tools: It is heavily used by Palo Alto Networks GlobalProtect to run Host Information Profile (HIP) checks when you log into a corporate VPN.
Utility Software: It also appears in software like CCleaner and Avast/Gen Digital products to support update scanning. [1, 2, 3, 4]
Is It Safe?
Legitimate Origin: If the file is signed by OPSWAT and sits in a valid folder (like a GlobalProtect or CCleaner directory), it is safe. [1]
Resource Usage: It runs briefly in the background to gather data and then closes. If it pops up and steals window focus, it is usually just refreshing its security scan. [1]
Malware Risk: Viruses can mimic legitimate file names. If the file is located in a strange folder or causes constant high CPU usage, run a full scan with a trusted antivirus tool. [1, 2, 3, 4]
These DO NOT appear other than at random times and DO NOT run resident with Norton. The process wsc_proxy.exe DOES!! I have found they ARE tied to certain background services for scanning and data gathering about what is and isn’t installed. These files renaming has allowed me to not see most nags over a long period of time. Your mileage may vary of course!!
PLEASE NOTE: Performing this suggestion should that be your course of action is done at YOUR PERSONAL RISK. Make sure you are confident in what you are doing beforehand.
