Utorrent Blocked By Norton

0 views
Skip to first unread message

Louella Kammann

unread,
Aug 4, 2024, 2:40:20 PM8/4/24
to dersrealama
Everytime I open Firefox I get a notice that Norton has blocked an intrusion. have run a full system scan in Norton and Malwarebytes and turned up nothing. I'm running windows 10 Home v21H2 and Norton 360 version 22.22.11.12

What home page are you using? It sounds like there may be a malicious ad on that page that Norton has blocked. If this is what is happening, there is nothing on your computer for scans to find, as Norton blocked it.


Hello and thanks for the comment. Ive set the browser to open the Google homepage on start up. I'm actually using the New Tab Homepage add on as well. I'll try setting a different homepage and see if that solves it. I'll also try clearing the cache again and see if that helps. Thanks again.


If your changes don't help, try disabling your browser extensions and test to see if you still get the intrusion block. If that solves the issue, you need to start enabling the extensions one at a time and restart the browser to test. If you get the warning after restarting one of your extensions, it would seem that extension is the problem


I have disabled all of my extensions and it still happens. however I have noticed that it doesn't happen all the time. For instance, if I close and then a minute later reopen Firefox, it starts without the pop up. If Firefox is closed for a while, then it shows up immediately. I am in the process of testing other browsers to see if it happens with them.


Gen trademarks or registered trademarks are property of Gen Digital Inc. or its affiliates. Firefox is a trademark of Mozilla Foundation. Android, Google Chrome, Google Play and the Google Play logo are trademarks of Google, LLC. Mac, iPhone, iPad, Apple and the Apple logo are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. Alexa and all related logos are trademarks of Amazon.com, Inc. or its affiliates. Microsoft and the Window logo are trademarks of Microsoft Corporation in the U.S. and other countries. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other names may be trademarks of their respective owners.


Would Malwarebytes or Norton run any differently if this block did not occur? Does this block just prevent the file from being scanned & might it have something to do with the backup being out on a cloud?


To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.


It looks like those entries are coming from Norton's self-protection/self-defense component and are just responding to Malwarebytes when it is analyzing Norton's processes/files. It shouldn't cause any harm. We have seen similar behaviors in the past from other AV products, including previous versions of Norton/Symantec products and it shouldn't affect how the two programs function together to protect the system.


You can try excluding Norton's files from Malwarebytes, but that probably won't work because Malwarebytes never truly ignores any file/folder in the sense that one might think in that it still scans/checks/monitors everything, exclusions simply cause Malwarebytes to allow/not detect the excluded items as threats meaning excluding it would probably not stop these entries from being created by Norton.


What you might be able to do if it is a problem is add MBAMService.exe as an excluded/trusted process in Norton and it might stop the alerts, however it's not guaranteed. Otherwise, you could probably disable the self-defense component in Norton if you had to and that would stop the alerts as well.


I think that I will leave well enough alone since MB & NS have worked well together. I would never know this happens except for reading NS history report as no flags ever come up & it seems that it refers to only the one same file over & over.


I think that's probably best as this really does no harm. It's just Norton protecting itself and Malwarebytes making sure things are secure. But it shouldn't stop either product from effectively defending your system from real threats.


See Cindy10's thread Norton Blocked my Mailwarebites antimailwareprogram! in the Norton forum for further information about these Unauthorized Access Blocked messages. As others have suggested, these entries are logged in the Norton Product Tamper Protection (NPTP) section of your Norton security history every time any executable (including trusted Windows system files like svchost.exe, dfrgntfs.exe, etc.) attempts to read/write/edit/delete a Norton file. This NPTP logging rarely causes a performance issue and it's usually safe to ignore these Unauthorized Access Blocked entries in your security history.


The instructions in Cindy10's Norton forum thread are a bit out-of-date but if you'd like to try Firefox's suggestion in post # 3 to create scan exclusions for the Malwarebytes v3.x files listed at -1123 (like Firefox, I always do this to prevent possible conflicts) this will likely stop the Unauthorized Access Blocked logging for MBAMService.exe. Go to Settings Antivirus Scans and Risks Exclusions / Low Risks and then add the file and folder exclusions in both the Items to Exclude from Scans section (to prevent detection during a "traditional" file scan like a Quick Scan) and Items to Exclude from Auto-Protect, SONAR Detection and Download Intelligence Detection section (to prevent detection by Norton's real-time protection) as shown in the image below. See the support article Exclude Files and Folders from Norton Auto-Protect, SONAR, and Download Intelligence Scans for further information.


I'm currently having a few issues running Norton v22.x and MB Premium v3.x together in real-time protection mode on my old Vista SP2 machine so I'm also testing the following exclusions for Norton executables in Malwarebytes at Settings Exclusions Add Exclusion. Unfortunately, the location of the main Norton executable (nortonsecurity.exe if you are using the latest Norton v22.14.0.54) moves to a different folder every time Symantec releases a product update so if you want to create an exclusion for a specific file like nortonsecurity.exe you'll have to remember to edit the exclusion every time Norton is updated.


Hi, Norton 360 had some kind of an update and wants to install a system extension. I keep getting the pop-up window that says "System Extension Blocked," that it was signed by Symantec, and that I have to open Security & Privacy System Preferences to approve. It pops up over and over and is really annoying.


However, when I open the preferences, there is no approval button. Occasionally, I'll get a pair of buttons for "MyApplication," both of which say that they were blocked because they're not from an identified developer, with buttons for Open Anyway and Allow. A third button says a profile has been installed that allows additional applications, with a button for Open Profiles. I can trigger these alerts to appear by re-trying the Norton installer, but they disappear too quickly to click on the buttons.


You can expect Norton to block any downloaded program until Norton has time to build a reputation for that program. Every release of KeePass is treated as a new program, without a reputation. You might going to the downloaded program's Properties and check the box to Unblock. This procedure allows me to install the program.

I use Norton 360 on the latest release of Windows 10 Professional x64.


Sometimes it takes a little time for anti-virus programs to determine that a new KeePass release is safe. You can probably override Norton but if you don't want to do that, wait until Norton decides KeePass is safe.


Norton 360 did not give the option to manually allow which is what normally happens since the threat assessment was considered high. The update finished and as far as I know Keepass is working normally. I was just wondering if the programmers could shed a little light as to why this file "ngenserviceclientlock.dat" needs to be modified. Or at the very least tell me what to look for that may or may not be working since it's modification was blocked on my install.


If you turn on the setup option 'Optimize KeePass performance', KeePass calls NGen [1], which generates a native image of KeePass.exe. With this, KeePass starts and runs a bit faster. NGen probably uses the 'ngenserviceclientlock.dat' file to indicate that it updates the native image cache.


I am having all kinds of problems with Norton's Data Protector. This "feature" of Norton Antivirus (which came to my computer recently, via their periodic automatic updates) does not allow un-registered programs to write files with certain extensions (dangerous extensions such as csv or txt are blocked). I like the idea in principle, but it should be limited to truly dangerous extensions such as xlsm. "Registering" the software is not practical when it is under development and debugging, where one creates new executables every 5 minutes (and possibly alternative versions).


I am in a situation (probably not uncommon in today's business world, full of real and perceived threats), where I cannot change any settings in my computer. IT managers' top priority is security, and efficiency often comes second.


This may be a related problem: Visual Fortran is giving me the following error message sometimes: Error 17 general error c101008d: Failed to write the updated manifest to the resource of file "C:\Users\.........\myprogram.exe". Access is denied. mt.exe


.txt files are reasonably safe because they do not provide any mechanism to include code, scripts, or macros that would be executed when the file is opened so is seems strange to block them. CSV when opened in Excel could lead to malicious activity however the route to protect from that lies within the setting in Excel rather than blocking a useful file type. I would speak with your IT.

3a8082e126
Reply all
Reply to author
Forward
0 new messages