I recently noticed a new shortcut to Norton Safety Minder had appeared on my son's computer desktop as well as a new program folder in his start menu - but only contained the shortcut to uninstall NSM. Windows XP SP3.
My thought was that either the program notified him that it needed an update (which I don't recall it ever asking for so far) or he tried to uninstall it and/or re-install it - i.e. tamper.
Other than tampering, what else might cause these new shortcuts to appear well after NSM has been installed and in use?