Worried about hidden virus on NIS 20.3.0.36

Norton Security | Norton Internet Security
1

Two days ago, stupid me clicked on a link contained in an Email I thought was from a friend. As soon as it opened a page, I realized the Email had not been sent by a friend....she had been hacked. I have done three scans with NIS and a full scan with free Malwarebytes Anti-Malware -- all came out with clean results, and my 64-bit Windows 7 computer is acting normal.

 

Is there anything further I should do to make sure a hacker has not dropped a file on my system? I am hesitant to use the Norton Power Eraser Tool.

 

My thanks....Miki. 

2

Two days ago, stupid me clicked on a link contained in an Email I thought was from a friend. As soon as it opened a page, I realized the Email had not been sent by a friend....she had been hacked. I have done three scans with NIS and a full scan with free Malwarebytes Anti-Malware -- all came out with clean results, and my 64-bit Windows 7 computer is acting normal.

 

Is there anything further I should do to make sure a hacker has not dropped a file on my system? I am hesitant to use the Norton Power Eraser Tool.

 

My thanks....Miki. 

3

Thank you F4E for your reply.....I will take your suggestion and do a full scan in Safe Mode.....I feel much better now :smileyhappy:

 

Miki

 

 

4

Michhala wrote

Thank you F4E for your reply.....I will take your suggestion and do a full scan in Safe Mode.....I feel much better now :smileyhappy:

 

Miki

 

Also, if you have all your email protection settings in Nis set correctly, Norton will protect you from danger...:smileyhappy:

5

Michhala wrote

Thank you F4E for your reply.....I will take your suggestion and do a full scan in Safe Mode.....I feel much better now :smileyhappy:

 

Miki

 

Also, if you have all your email protection settings in Nis set correctly, Norton will protect you from danger...:smileyhappy:

 

 

 
Not so much.....I use AOL for my Email and although it shares the IE9 browser it is independent, I believe, of NIS.That said, AOL usually blocks an Email containing a suspicious attachment, but not a link within a message because the link itself is not the virus. If I use the AOL desktop to do a Google Search, I am not protected by NIS safety either,.
6

Check the recent history.

7

Re: Worried about hidden virus on NIS 20.3.0.36

 

‎03-02-201302:35 AM

Check the recent history.
 
bolean -- do you see anything notable in below history? 2/27 is the date I began all the security scans.
 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/27/2013 6:01:02 PM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,2/27/2013 6:01:02 PM,C:\WINDOWS\SYSTEM32\CONHOST.EXE,6088,C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\cltlmh.exe,3368,Access Process Data,Unauthorized access blocked

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/27/2013 5:56:17 PM,Medium,Unauthorized access blocked (Access Thread Data),Blocked,No Action Required,2/27/2013 5:56:17 PM,C:\WINDOWS\SYSTEM32\SERVICES.EXE,636,C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\ccsvchst.exe,1352,Access Thread Data,Unauthorized access blocked

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/27/2013 5:56:13 PM,Medium,Unauthorized access blocked (Access Thread Data),Blocked,No Action Required,2/27/2013 5:56:13 PM,C:\WINDOWS\SYSTEM32\SERVICES.EXE,636,C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\ccsvchst.exe,1352,Access Thread Data,Unauthorized access blocked

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/27/2013 9:51:58 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,2/27/2013 9:51:58 AM,C:\WINDOWS\SYSTEM32\CONHOST.EXE,3368,C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\cltlmh.exe,5036,Access Process Data,Unauthorized access blocked

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/27/2013 9:47:26 AM,Medium,Unauthorized access blocked (Access Thread Data),Blocked,No Action Required,2/27/2013 9:47:26 AM,C:\WINDOWS\SYSTEM32\SERVICES.EXE,632,C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\ccsvchst.exe,576,Access Thread Data,Unauthorized access blocked

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/27/2013 9:47:17 AM,Medium,Unauthorized access blocked (Access Thread Data),Blocked,No Action Required,2/27/2013 9:47:17 AM,C:\WINDOWS\SYSTEM32\SERVICES.EXE,632,C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\ccsvchst.exe,576,Access Thread Data,Unauthorized access blocked

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/27/2013 2:12:00 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,2/27/2013 2:12:00 AM,C:\WINDOWS\SYSTEM32\CONHOST.EXE,6352,C:\Program Files (x86)\Norton Internet Security\Engine\20.3.0.36\cltlmh.exe,196,Access Process Data,Unauthorized access blocked

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/27/2013 2:06:15 AM,Medium,Unauthorized access blocked (Open File),Blocked,No Action Required,2/27/2013 2:06:15 AM,C:\WINDOWS\SYSTEM32\WBEM\WMIPRVSE.EXE,7608,C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\IPSFFPlgn\components\ipsffpl.dll,0,Open File,Unauthorized access blocked

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/27/2013 2:06:13 AM,Medium,Unauthorized access blocked (Open File),Blocked,No Action Required,2/27/2013 2:06:13 AM,C:\WINDOWS\SYSTEM32\WBEM\WMIPRVSE.EXE,7608,C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\IPSFFPlgn\components\ipsffpl.dll,0,Open File,Unauthorized access blocked

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/27/2013 1:56:40 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,2/27/2013 1:56:40 AM,C:\PROGRAM FILES\SUPERANTISPYWARE\SASCORE64.EXE,1448,C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\ccsvchst.exe,4324,Access Process Data,Unauthorized access blocked

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/27/2013 1:56:22 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,2/27/2013 1:56:22 AM,C:\PROGRAM FILES\SUPERANTISPYWARE\SASCORE64.EXE,1448,C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\ccsvchst.exe,2036,Access Process Data,Unauthorized access blocked

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction,Terminal Session

2/27/2013 1:47:37 AM,Medium,Unauthorized access blocked (Access Process Data),Blocked,No Action Required,2/27/2013 1:47:37 AM,C:\PROGRAM FILES (X86)\MALWAREBYTES' ANTI-MALWARE\MBAM.EXE,2924,C:\Program Files (x86)\Norton Internet Security\Engine\20.2.1.22\ccsvchst.exe,2036,Access Process Data,Unauthorized access blocked,1

 

Category: Norton Product Tamper Protection

Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction

2/26/2013 9:03:10 PM,Medium,Unauthorized access blocked (Set Registry Security Key),Blocked,No Action Required,2/26/2013 9:03:10 PM,C:\WINDOWS\SYSTEM32\SVCHOST.EXE,804,HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BHDRVX64\0000\Control\,0,Set Registry Security Key,Unauthorized access blocked

 

 

8

Hi Michhala,

 

Entries in Norton Product Tamper Protection record any attempt by an outside agent to access a Norton file or process.  In almost all cases, the events are caused by legitimate programs or Windows processes, and are nothing to worry about.  That is true of the entries you have posted.  Those are all legitimate things running on your PC.  Norton is simply making sure that nothing, not even Windows, can cause problems by disrupting Norton's operation.  There is no evidence of anything malicious in what you have posted.

9

 

03-03-201309:17 AM

Hi Michhala,

 

Entries in Norton Product Tamper Protection record any attempt by an outside agent to access a Norton file or process.  In almost all cases, the events are caused by legitimate programs or Windows processes, and are nothing to worry about.  That is true of the entries you have posted.  Those are all legitimate things running on your PC.  Norton is simply making sure that nothing, not even Windows, can cause problems by disrupting Norton's operation.  There is no evidence of anything malicious in what you have posted.

 

SendOfJive -- You made my day!!!!! Thank you so very much.....Michhala (aka Miki)