I'm getting:
Category: Norton Product Tamper Protection
Date & Time,Severity,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction
27/02/2012 20:24,Medium,Unauthorized access blocked (Open Process Token),Blocked,No Action Required,27 February 2012 20:24,c:\windows\system32\wbem\wmiprvse.exe,3364,C:\Program Files\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrvProxy.exe,1672,Open Process Token,Unauthorized access blocked
every second for an hour or two most days causing 100% CPU and bringing my PC to a halt.
What is causing wmiprvse to access DIskDoctor? Is this suspicious? Is there any way to identify the cause of the problem and fix it? Or even just work around it?
My understanding is that wmiprvse is part of the Windows enterprise monitoring setup. I'm not part of an enterprise, so who's doing the monitoring?
Thanks
Andrew