I have recently noticed a large number of blocked process alteration events (over 100 last week). They all say the same thing - attempt to alter function URLDownloadToFileW blocked" I know that Rapport says that this technique is used by malware but also by some legitimate software so it may be nothing to worry about. It appears on both XP with Firefox and Windows 7 with IE9.
I have Norton IS 2011. I have done a full scan and also run free Malwarebytes and both show nothing
Does anyone know what is causing these reports and if anything is amiss?