• 所有社区 - 中文
    • 所有社区 - 中文
    • 论坛
    • 创意
    • 博客
高级

不是您要找的? 咨询专家!

好评0

Continuous Open process Token

In the last few days In recent history all I ever get every 3 seconds is Unauthorized access  blocked (Open process Token). The follow is listed under view details:

Actor       C:/Program Files/Ask Partner Network/Toolbar/Updater/ TB Notifier.EXE.

Actor       PID 2296

Target     C:/Program Files/Norton /Internet Security/Engine/21.6.0.32/nis.exe.

Target     PID 3784

Action     Open Process Token

Reaction   Unauthorized access blocked

Terminal Session      1

This is all I see in recent history and if I want to check on Live Updates or Scan I have to go to those specific categories. This happened a few years ago but with different targets and actors. After much complaining on the forum by various Forum members, it suddenly stopped. I hope someone can stop it again. it is only happening on the Windows Vista computer and not our XP computer.

Holly

回复

好评0

Re: Continuous Open process Token

Hi Holly,

Perhaps the following Google search may provide some insight into your situation.:

https://www.google.com/#q=TBNotifier.EXE&spell=1

I found the first choice had some good basic info about what you may be encountering.  However I am not the "sharpest tool in the shed", so you may want to wait to see what others say!

好评0

Re: Continuous Open process Token

Avoid Green Bar > Download Anti-Malware >  opens SpyHunter Installer.exe
SpyHunter is CRAP

好评1 Stats

Re: Continuous Open process Token

This is just a Norton Product Tamper Protection event, where Norton is blocking access to its process by an outside agent.  It isn't an attack, and you can ignore these log entries.  The Ask Toolbar program is simply not being allowed to access the Norton process.

好评0

Re: Continuous Open process Token

Hi Holly,

I am just curious to know if you have really wanted to install the Ask Toolbar, or if it was an add on that you took installing any other software.

Sandro
好评0

Re: Continuous Open process Token

  To:   Sandro_cm     

When I reinstalled Google Chrome yesterday, I said NO to the Ask Toolbar because I have enough toolbars and I have heard some bad things about the Ask Toolbar.

In response to  yank Guru, I looked at the extensions  of all my browsers, IE9, Firefox and Google Chrome. The one with that Ask Toolbar extension was Firefox. I've had Firefox for some time now, and it was never there before so I must have got it recently, but I never wanted it. It was disabled which I didn't do either as I never saw the toolbar there until today. I clicked on Remove, and it disappeared from the list of extensions, but I'm still getting the Open Process Token. There must be remnants of it somewhere but I haven't been able to find it.  Just last week for another reason I used the free Microsoft Malicious Software Removal Tool, which finds and  helps remove malware and any other infections found. It found none on my computer, and I did the full scan after the quick scan that Microsoft offered.

Holly

PS  I must admit I don't look at the extensions every day on my computer, but I usually do once a week, especially Firefox as I use that browser the most.

好评0

Re: Continuous Open process Token

To: SendOfJive 

I just don't like not being able to read Recent History without going to the specific categories,such as Scan and Live Update. I'm also worried I haven't completely removed the AskToolbar Extension although it only appeared on my Extension list. The actual toolbar I never saw--it was disabled.  Please read the comment about this to   Sandro_cm . Also worried it might cause problems---that is it is some kind of malware.

Holly

好评0

Re: Continuous Open process Token

Holly, Try to clean your temp folder, %temp% . Then remove everything related from your username folder and reboot

Sandro
好评0

Re: Continuous Open process Token

To: Sandro_cm Guru

I'm not sure I know what you mean. I have cleared history from all 3 browsers and deleted temporary files of IE9. Also have done  Disk Cleanup.What do you mean by username folder?

Holly

好评0

Re: Continuous Open process Token

Holly:

To: Sandro_cm Guru  What do you mean by username folder?

I think Sandro is pointing to User Name > AppData > Local > Temp  eg: bjm > AppData > Local > Temp
<< it is only happening on the Windows Vista computer>>
How to see hidden files in Windows Vista

好评0

Re: Continuous Open process Token

Exactly bjm, thanks!

Holly,

From there, open the AppData folder where there are three folders
1- Temp
2- LocalLow
3- Roaming

Look inside them, one by one, there could be remnants (folders and files) that are related to the Ask Toolbar. If so, delete them.

Then, do the same for Program and ProgramData folders.
Start, click Computer> Local Disk (C):> Program and ProgramData folders. 

Restart the computer. But, as SOJ says, Norton is doing his job, to prevent access to any external thing within itself.

I hope this helps.

Sandro
好评0

Re: Continuous Open process Token

Hi holly,
Please check the installed program list from control panel and uninstall if you find any unwanted programs listed there, especially related to Ask.
And then do the cleanup suggested.
Now reboot your machine and check the logs.
By design to purpose, 'Recent History' must show the latest event logs related to Norton product. Unfortunately, your latest events are these blocks.
regards, CV | There is no ONE TOUCH KEY to security . Be alert and vigilant. . | Always have a Backup Plan!
好评0

Re: Continuous Open process Token

Holly, Ask Toolbar is a part of Norton Safe Search. If you wish to use another search provider such as Google or Yahoo, your browser will give you the option of setting a default search engine.

FWIW, I just have Google as my homepage in both FF and IE, and search from there.

Windows 10 Home X 64 Norton Security Premium Latest Version
好评0

Re: Continuous Open process Token

To: bjm_

Thanks for your help,but I decided  to not follow those steps you and  Sandro_cm   gave me as there was a warning that doing so could make my computer inoperable. I did click on Computer and then HP (C) and then Program Files where I saw the Ask Toolbar. I removed that but not the AskPartnerNetwork listed there too (which is the one showing upon the Open Process Token details) in Norton Recent History. The Ask Toolbar as mentioned earlier was never on any of my browsers (IE9, Firefox, or Google Chrome).  I also noticed that the Ask Toolbar and the  AskPartnerNetwork were installed on my computer 10/04/2014 so I don't know why the sudden blocking by Norton. However this happened a few years ago to me where something from Windows was blocked and others on the Forum had the same problem with Open Process Token but not everyone had the same thing  blocked. Some had Windows Vista too. Eventually the blocking was stopped and not in Norton Recent History.

I have since been told as I was then not to be concerned and that Ask was a part of Norton. I have Norton Safe Search on all 3 browsers. Also In a comment above to me it was said that  Ask Toolbar is a part of Norton Safe Search (F4E).

So I think I will just live with the continuous Open Token Process blockings in my Norton Recent History rather that removing something I might need for my computer to operate.

I do appreciate all the help from everyone who commented on the Norton Forum.  I've never had so many replies on this Forum.

Holly

好评0

Re: Continuous Open process Token

To:Sandro_cm

Please see the comment I made to bjm_.

I do appreciate all your help!!!!

Holly

好评0

Re: Continuous Open process Token

Hi Holly, I saw it.

Whenever the files and folders are removed, the warning will always appear, but what I said to remove could not make your system inoperable. They are just files and folders that relate to the Ask Toolbar.

No problem, Holly, it's your computer. BTW, these are just logs that Norton shows in History, avoid watching them.

Take care!

Sandro
Accepted Solution
好评2 Stats

Re: Continuous Open process Token

To: Sandro_cm

I got rid of the Continuous Open process Token: C:/Program Files/Ask Partner Network/Toolbar/Updater/ TB Notifier.EXE as I went back to  Control Panel, then Progams and looked again and saw near the bottom of all my programs was  Search and then the word ASK, which I somehow neglected to see many other times. I was probably paying more attention to anything listed under the letter A for AskPartner Network. I removed the Search ASK, and immediately the  Continuous Open process Token: C:/Program Files/Ask Partner Network/Toolbar/Updater/ TB Notifier.EXE  stopped. I'm still surprised I had the problem without the ASK Search Toolbar  being on any of my browsers as I have the Norton Safe Search on all my browsers and don't really want any others. So just having that on my Windows Programs made Norton have all those continuous blockings in Recent History.

Holly

好评0

Re: Continuous Open process Token

To: bjm_

Please see the comments I made to Sandro regarding my problem being solved.

Holly

好评0

Re: Continuous Open process Token

Holly:

To: bjm_ Please see the comments I made to Sandro regarding my problem being solved.   Holly

Thanks so much for the update.   Will remember this ~ Open Token 

好评0

Re: Continuous Open process Token

Hi Holly,

I'm glad to hear that your problem has been solved.
No longer Open ProcessToken logs for the Ask Toolbar will be displayed in your NIS History, and thanks for letting us updated.

Sandro

Sandro

This thread is closed from further comment. Please visit the forum to start a new thread.