Unauthorized access not detected by Norton

Twice I noticed that my external drive was busy for several minutes with data being uploaded by an unauthorized someone, after my PC was idle for some time (I assume data out since the contents did not change) . Both times the moment I touched the mouse to see what was going on the data transfer stopped and the Symantec program log registered an unauthorized access being blocked at the very time I hit the mouse (NOT BEFORE!!!!). A virus scan after the fact showed no virus. Any idea how to stop this snooping and why is Symantec antivirus not catching this proactively? Is this also happening with the internal drive and I just do not see it?

Hi fhmd,

 

"Unauthorized access blocked" is a log entry for Norton Product Tamper Protection, the Norton component that prevents outside programs from accessing Norton files and processes.  It is normal for legitimate programs to request access to Norton files with some regularity.  All such requests are blocked to make sure that Norton is not disrupted or compromised.  Your log entries do not indicate anything malicious snooping within your system - only that whatever program named as the "Actor" in the entry was stopped from accessing Norton.  This is a very routine type of event and does not imply any sort of evil mischief going on with your system.

Which Norton Product do you have?

 

If you let us know there is a specific Forum for each product or group of products so I'll ask for your message to be moved over there or better exposure. You won't lose sight of it because a link will be left here.

 

Although you have the answer here it will help others to know and this specific Forum is concerned with problems with the Forum operation itself rather than with Norton Products.

What Is more than likely happening Is Indexing. Win Vista and 7 do this when the computer Is Idle and can make It seem as though there Is a ghost In the machine. It Is nothing to worry about, all It does Is catalog files and folders for easier searches withing windows.

 

Here Is a good explanation of this from How to Geek, a very respected site.