I have several reports in my NAV log about attempted unauthorized access
by drwtsn32.exe (DrWatson Postmortem Debugger) against ccEvtMgr.exe
(Symantec Event Manager Service).

Why is this? Should I be concerned? What should I do about it? (No,
removing NAV is not an option.)

A recent log entry is as follows:

Event Details:
Time: 9/25/2006 7:20:34 PM
Actor: C:\WINDOWS\system32\drwtsn32.exe (PID=3656)
Target: C:\Program Files\Common Files\Symantec Shared\ccApp.exe (PID=2096)
Action: Unauthorized access
Reaction: Unauthorized access stopped

--

David E. Ross
<http://www.rossde.com/>

Concerned about someone (e.g., Pres. Bush) snooping
into your E-mail? Use PGP.
See my <http://www.rossde.com/PGP/>

1. http://www.google.com/search?sourcei...&q=dr%20watson
---
Norton is a resource hog.
Norton can severely cripple your desktop environment, doubling and often
quadrupling the amount of time for certain applications to open.
----
Symantec NAV, NIS, NSW Removal:
http://basconotw.mvps.org/SymRem.htm
http://www.google.com/search?sourcei...stall%20norton

To remove Norton completely, see:
http://www.eweek.com/article2/0,1759,1659201,00.asp
and:
http://support.microsoft.com/?kbid=878462
and:
http://service1.symantec.com/SUPPORT...05033108162039
--
Use Symantec's Norton removal tool
Variant (1) auto
http://service1.symantec.com/SUPPORT...tsgeninfo.nsf&

Variant (2) manual
http://service1.symantec.com/SUPPORT...ninfo.nsf&view

Kayman wrote:
> 1. http://www.google.com/search?sourcei...&q=dr%20watson
> ---
> Norton is a resource hog.
> Norton can severely cripple your desktop environment, doubling and often
> quadrupling the amount of time for certain applications to open.

While that was a problem with my old PC, it does not seem to affect my
new PC. I'm no longer interested in removing NAV merely because of the
resources it uses. I've had four hostile attacks against my PC just
today, all of which were stopped by NAV.

There remains the appearance of a conflict between Dr. Watson and NAV.
Is it something about which I should be concerned?

--

David E. Ross
<http://www.rossde.com/>

Concerned about someone (e.g., Pres. Bush) snooping
into your E-mail? Use PGP.
See my <http://www.rossde.com/PGP/>

See what is reported in the Dr. Watson log.
http://support.microsoft.com/kb/308538/en-us

JS

"David E. Ross" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I have several reports in my NAV log about attempted unauthorized access by
>drwtsn32.exe (DrWatson Postmortem Debugger) against ccEvtMgr.exe (Symantec
>Event Manager Service).
>
> Why is this? Should I be concerned? What should I do about it? (No,
> removing NAV is not an option.)
>
> A recent log entry is as follows:
>
> Event Details:
> Time: 9/25/2006 7:20:34 PM
> Actor: C:\WINDOWS\system32\drwtsn32.exe (PID=3656)
> Target: C:\Program Files\Common Files\Symantec Shared\ccApp.exe (PID=2096)
> Action: Unauthorized access
> Reaction: Unauthorized access stopped
>
> --
>
> David E. Ross
> <http://www.rossde.com/>
>
> Concerned about someone (e.g., Pres. Bush) snooping
> into your E-mail? Use PGP.
> See my <http://www.rossde.com/PGP/>