Hi:
I’m a new user of NIS 2011 and have a question. I’m constantly seeing the event shown below in my Security History. There always appears to be 2 instances of ccSvcHst.exe running on my machine – one instance under the SYSTEM User, and the other instance under the name of whatever user account I happen to be logged into at the time. I understand the message but should I constantly be seeing it in History?
Thanks
Category: Norton Product Tamper Protection
Date = 13/07/2011 14:00
Medium Severity
Action = Duplicate object
Reaction = Unauthorized access blocked
Actor = C:\WINDOWS\SYSTEM32\SERVICES.EXE
Actor PID = 844
Target = C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
Target PID = 2164
NIS 2011 18.6.0.29
Windows XP Home (32 bit) SP3
Dell Dimension Desktop