C\PROGRAM FILES\NORTON UTILITIES PREMIUM\ACTIVESYNC.EXE
Actor PID 3224
have been getting numerous Daily attempts by Norton utilities premium to access HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\norton\entinf\NortonUtility\
flagged by N360 unauthorized set registry value
terminal session 2
i tend to check once a week my reports but this seems to be excessive in the amounts of times this is happening
ANY HELP? on how to prevent it occuring anymore?
NORTON 360 Premium with VPN
windows 10 ver20H2
Category: Norton Product Tamper Protection
Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Action,Reaction,Terminal Session
01/12/2020 12:09:10,Medium,Unauthorized access blocked (Set Registry Value),Blocked,No Action Required,01/12/2020 12:09:10,C:\PROGRAM FILES\NORTON UTILITIES PREMIUM\ACTIVESYNC.EXE,3224,HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Norton\entinf\NortonUtility\,Set Registry Value,Unauthorized access blocked,2
the abve is copied direct from the report.
just want to stop these happening if possible
THANKS in advance