ds*.bat from NAV\_18.6.6.29\NCW\temp\

My firewall keeps flagging variant after variant of a ds*.bat coming out of c:\Documents and Settings\All Users\Application Data\Norton\{0c55c096-0f1d4f28-aaa2-85ef591126e7}\NAV_18.6.0.29\NCW\temp\

 

Is this legitimate behavior, and if so, why does the filename keep changing, so that the firewall is being triggered over and over again?

 

Thanks,

Peter