Can you find this log entry for SugarSynchSetup in the security history under the heading at History | Show | Norton Product Tamper Protection, and does the heading for the entry translate roughly as "unauthorized access blocked"? If so, please read thingy's thread here. These unauthorized access blocked messages are a normal function of Norton Product Tamper Protection, and a log entry will be created in your security history every time a process attempts to read/write/edit/delete a Norton file, including common Windows processes like svchost.exe, dfrgntfs.exe, etc.
Since Norton rated the installer as trusted, I don't think you have to worry about repairing your Norton installation as long as SugarSynch is working correctly on your Lenovo computer.
------------ MS Windows Vista Home Premium 32-bit SP2 * Firefox 25.0.1 * IE 9.0 * NIS 2013 v. 20.4.0.40 HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS
I see that "unauthorized access blocked" might be normal but it means that some process on my laptop was trying to attack NIS-files. In general, it is not normal when attacker is on my computer! So, it would be important to know for such cases additionally parent process ID and its path and full backtrace if possible. Because in my case the reported PID in the history is missing and I have no idea how to find out source of the problem and attacker :( It's strange that NPE says all is OK on my computer.
BTW, Please confirm that all NIS executables and DLLs are OK (via using kind of md5sums for all of them) when I check installation version of NIS on my computer.
The Actor in the details of your unauthorized access blocked message should give you the full path (location) of the file attempting the read/write/edit /delete of the target Norton file. Norton Product Tamper Protection makes no distinction between the severity of an attempted read/write/edit/delete of Norton files by malware vs. legitimate software (e.g., Windows processes like svchost.exe, services.exe, iexplore.exe, dfrgntfs.exe) - please see my post here in the Product Sugestions board for further information.
Go to History | Download Insight, double-click to open any entry, click the Copy to Clipboard link, and then open a text file editor like Windows Notepad and paste the contents of the clipboad into the text editor. The details will usually show the SHA hashtag or MD5 sum for the file. If not, you can also submit any file smaller than 64 MB in size to the VirusTotal site to check the hashtag and sum - just click the Choose File button on the VirusTotal site and browse to the location of the file shown when you click the Locate link in the File Insight report.
------------ MS Windows Vista Home Premium 32-bit SP2 * Firefox 25.0.1 * IE 9.0 * NIS 2013 v. 20.4.0.40 HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS
2) how to repair NIS installation (or reinstall the latest version) to be sure that all files and dlls are truly correct?
Hi vipasko:
I'm not sure if I addressed your initial questions about repairing a NIS installation. You can start an online diagnostic session by going to Support | Get Support and AutoFix will often find and automatically repair simple problems with your installation.
You can also use the Norton Remove and Reinstall (NRnR) tool here if you'd like to try a re-install of the latest NIS v. 21.1.0.18. This NRnR tool doesn't always solve serious problems with corrupted installations but we can provide detailed instructions on how to perform a deep wipe and re-install of NIS using the Norton Removal Tool if you think that's necessary.
------------ MS Windows Vista Home Premium 32-bit SP2 * Firefox 25.0 * IE 9.0 * NIS 2013 v. 20.4.0.40 HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS
In case of blocked access to open NIS files Actor and Actor PID might be not informative. In my case it is svchost.exe. So, parentActor (or all parents)who runs it would be very helpful in the message .....