What's this?

[gb]

I get this in the Norton AV Alerts reports. It seems to happen at startup.
There are about 15 such reports each time I startup. All with WinMgmt as
the "actor". I've run up-to-date Norton AV, Ad-Aware SE Personal, ewido
anti-malware but nothing is found. I'd sure like to know if this is
something to worry about and what it is.

Event Details:
Time: 7/26/2006 7:29:47 PM
Actor: C:\WINNT\System32\WBEM\WinMgmt.exe (PID=1048)
Target: C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
Action: Unauthorized access
Reaction: Unauthorized access stopped

Thanks
Gary

 

[Sir_George]

I get this in the Norton AV Alerts reports. It seems to happen at
startup. There are about 15 such reports each time I startup. All
with WinMgmt as the "actor". I've run up-to-date Norton AV, Ad-Aware
SE Personal, ewido anti-malware but nothing is found. I'd sure like
to know if this is something to worry about and what it is.

Event Details:
Time: 7/26/2006 7:29:47 PM
Actor: C:\WINNT\System32\WBEM\WinMgmt.exe (PID=1048)
Target: C:\Program Files\Common Files\Symantec
Shared\CCPD-LC\symlcsvc.exe Action: Unauthorized access
Reaction: Unauthorized access stopped

Thanks
Gary

Visit the following site;

http://service1.symantec.com/SUPPORT/nav.nsf/0/0b2e7a0414195dd588256e1b005d3777?OpenDocument

 

[David H. Lipman]

From: "gb" <[email protected]>

| I get this in the Norton AV Alerts reports. It seems to happen at startup.
| There are about 15 such reports each time I startup. All with WinMgmt as
| the "actor". I've run up-to-date Norton AV, Ad-Aware SE Personal, ewido
| anti-malware but nothing is found. I'd sure like to know if this is
| something to worry about and what it is.
|
| Event Details:
| Time: 7/26/2006 7:29:47 PM
| Actor: C:\WINNT\System32\WBEM\WinMgmt.exe (PID=1048)
| Target: C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
| Action: Unauthorized access
| Reaction: Unauthorized access stopped
|
| Thanks
| Gary
|


It's Windows Mangement Instrumentation (WMI) and is OK.

I can't believe that Symantec, which uses WMI, is complaining about WMI !

That's BS !!