WD vs. Norton

[Guest]

I'm a newcomer to this discussion group, and although I've seen several posts
that discuss this, I haven't seen a specific answer to the question I need to
ask.

Last night, I was browsing through the various options on Norton, I noticed
that the activity log in Norton was stuffed with hundreds of warning notices
telling me of unauthorized network access attempts. Except for a different
date and time, each notice said something like this:
Event Details:
Time: 7/6/2006 11:01:27 PM
Actor: C:\Program Files\Windows Defender\MsMpEng.exe (PID=1004)
Target: C:\Program Files\Common Files\Symantec Shared\ccLgView.exe (PID=3112)
Action: Unauthorized access
Reaction: Unauthorized access stopped

Here's my first question: If Norton views WD's activity as "unauthorized
access," and if Norton has stopped WD's access each time, does that mean that
Norton has stopped WD from protecting my machine? Can WD do anything if it
is denied access to whatever files it's trying to reach?

Here's my second question: What can WD do that Norton can't do? Do I need
WD if I have Norton? I didn't even realize that I had loaded WD onto my
machine. Just one day, after one of those annoying "Windows has detected 7
updates that need to be loaded" messages, the old Windows AntiSpyware icon
disappeared and WD appeared.

Thanks,

Fred

 

[Bill Sanderson MVP]

I would ignore these log entries. I don't believe that they indicate any
loss of protection from either product. Norton is preventing Windows
Defender from scanning their signed executables, and logging this.

I would keep Windows Defender installed. I'm not clear on what version of
Norton you have (and even if I was, I don't have a feature list to compare
the two)--but extra layers of protection with regard to spyware are
generally considered good by most reviewers.

 

[Guest]

Bill,

Further to your reply to "Idaho Word Man", I can report similar log entries
in Norton AV. However there are many of them and I have reported this to
Symantec also, since it is busting my alerts log at the seams and causing me
to miss any other alerts. I copy the report to you below for your comments.
This is regarding WD Beta 2 -vs- Norton AntiVirus 2006 version 12.2.0.13.

(note: I have cropped the log as it is far too long to post here in its
entirety, but most of it is repetitions of the same)

Regards,

Andy Woolford

-------------------------------

Have installed windows defender beta 2. My Norton Antivirus reports
multiple "Unauthorised access" to symantec files by Windows defender.
Reaction: Unauthorised access stopped.

Is there a solution to this problem?

I copy the log file below:

Regards,

Andy Woolford

--------------------------------

Category: Alerts
Date,Action,Details
31/07/2006 00:24:22,Unauthorized access logged,"SymProtect Event Details:
Time: 31/07/2006 00:24:22 Actor: C:\PROGRAM FILES\WINDOWS
DEFENDER\MSMPENG.EXE (PID=1404) Target: C:\Program Files\Common
Files\Symantec Shared\CCLGVIEW.EXE Action: Unauthorized access Reaction:
Unauthorized access stopped http://www.symantec.com"
31/07/2006 00:24:22,Unauthorized access logged,"SymProtect Event Details:
Time: 31/07/2006 00:24:22 Actor: C:\PROGRAM FILES\WINDOWS
DEFENDER\MSMPENG.EXE (PID=1404) Target: C:\Program Files\Common
Files\Symantec Shared\CCLGVIEW.EXE Action: Unauthorized access Reaction:
Unauthorized access stopped http://www.symantec.com"
31/07/2006 00:23:58,Unauthorized access logged,"SymProtect Event Details:
Time: 31/07/2006 00:23:58 Actor: C:\PROGRAM FILES\WINDOWS
DEFENDER\MSMPENG.EXE (PID=1404) Target: C:\Program Files\Norton
AntiVirus\qconsole.exe Action: Unauthorized access Reaction: Unauthorized
access stopped http://www.symantec.com"
31/07/2006 00:23:57,Unauthorized access logged,"SymProtect Event Details:
Time: 31/07/2006 00:23:57 Actor: C:\PROGRAM FILES\WINDOWS
DEFENDER\MSMPENG.EXE (PID=1404) Target: C:\Program Files\Norton
AntiVirus\qconsole.exe Action: Unauthorized access Reaction: Unauthorized
access stopped http://www.symantec.com"
31/07/2006 00:22:17,Unauthorized access logged,"SymProtect Event Details:
Time: 31/07/2006 00:22:17 Actor: C:\PROGRAM FILES\WINDOWS
DEFENDER\MSMPENG.EXE (PID=1404) Target: C:\Program Files\Common
Files\Symantec Shared\NMain.exe Action: Unauthorized access Reaction:
Unauthorized access stopped http://www.symantec.com"
31/07/2006 00:22:17,Unauthorized access logged,"SymProtect Event Details:
Time: 31/07/2006 00:22:17 Actor: C:\PROGRAM FILES\WINDOWS
DEFENDER\MSMPENG.EXE (PID=1404) Target: C:\Program Files\Common
Files\Symantec Shared\NMain.exe Action: Unauthorized access Reaction:
Unauthorized access stopped http://www.symantec.com"

etc etc...