Unable to access report directory from command line

Norton 360 for Windows
1

Norton 360 antivirus writes scan reports to C:\ProgramData\Norton\Antivirus\report. The directory and reports are accessible from File explorer (Windows 10). However, the Antivirus directory does not have execute permission so trying to access reports from the command line is not possible.

It is also not possible to change the permissions for the Antivirus directory to give it X permission.

C:\ProgramData\Norton>cd Antivirus\report
Access is denied.

While documenting this I did discover that the files are accessible from outside the directory, but that is very inconvenient.

C:\ProgramData\Norton>dir Antivirus\report
Volume in drive C is System
Volume Serial Number is 8E4D-A935

Directory of C:\ProgramData\Norton\Antivirus\report

2025-06-08 11:57 AM .
2025-06-08 11:57 AM ..
2025-06-08 11:45 AM 7,223 AntiRansomwareShield.txt
2025-06-08 11:10 AM 10,632 aswBoot.txt
2025-06-08 11:45 AM 7,223 BehaviorShield.txt
2025-06-08 11:45 AM 7,223 BrowserProtection.txt
2025-06-08 11:45 AM 7,750 EmailShield.txt
2024-12-27 03:43 AM 0 FamilyShield.txt
2025-06-08 11:45 AM 10,416 FileSystemShield.txt
2025-06-08 01:20 PM 721 Quick Scan.txt
2025-06-08 11:45 AM 7,223 RemoteAccessShield.txt
2025-06-08 11:45 AM 7,224 SafeBrowser.txt
2025-06-08 11:45 AM 7,223 TinyFwShield.txt
2025-06-08 11:45 AM 8,825 WebShield.txt
12 File(s) 81,683 bytes
2 Dir(s) 447,634,006,016 bytes free

The directory permissions for the Norton directory:

C:\ProgramData\Norton>icacls .
. NT AUTHORITY\SYSTEM:(I)(OI)(CI)(F)
BUILTIN\Administrators:(I)(OI)(CI)(F)
BLAZE\julie:(I)(F)
CREATOR OWNER:(I)(OI)(CI)(IO)(F)
BUILTIN\Users:(I)(OI)(CI)(RX)
BUILTIN\Users:(I)(CI)(WD,AD,WEA,WA)

I am not sure why Users is listed twice.
Now permissions for the Antivirus directory.

C:\ProgramData\Norton>icacls Antivirus
Antivirus NT AUTHORITY\SYSTEM:(OI)(CI)(F)
BUILTIN\Administrators:(OI)(CI)(F)
BUILTIN\Users:(OI)(CI)(R)

Even though the administrator account has Full access, nothing I have tried from an administrator command prompt will allow me to change Antivirus user permissions to RX.
All commands result in

C:\ProgramData\Norton>icacls Antivirus /grant:r BUILTIN\Users:RX
Antivirus: Access is denied.
Successfully processed 0 files; Failed processing 1 files

In addition, I am not sure why the report directory is under Antivirus instead of under Norton like the Temp directory.

2

AI Overview
Norton device security is designed with self-protection mechanisms to prevent malicious attempts to disable or interfere with its operation, including those attempted through the command line

Here’s how Norton protects itself:

  • Tamper Protection: Norton software utilizes tamper protection to make it difficult for malware or unauthorized users to disable its core components or alter its settings via the command line or other means.
  • Blocking Malicious Commands: Norton is designed to detect and block threats that attempt to execute commands from command and control centers (C&C) to download additional malicious payloads.
  • Detecting and Removing Risks: When a security risk is detected, Norton will typically automatically remove it or prompt the user for input on how to address the threat.
  • Preventing Exploitation of Vulnerabilities: Norton is designed to block techniques that malware might use to exploit security vulnerabilities, which could potentially be triggered through command-line actions.
  • Protection against Brute-force Attacks: Norton includes features like remote access protection that can help block malicious attempts to gain unauthorized access to your computer via remote desktop or other methods, which could include command-line exploitation.

While some command-line tools can be used to manage certain aspects of the Norton product, such as the firewall or antivirus settings, disabling or interfering with the core protection mechanisms directly through common command-line instructions is generally prevented due to the robust self-defense features.

In summary, Norton’s device security is designed to protect itself from command-line attacks and other malicious attempts to compromise its functionality.

AI responses may include mistakes.

2 Likes