Process ID is just a number that Windows gives to various applications as they start.
Unfortunately, nobody can tell you what 5852 or 2348 or any such number might mean. They are volatile. They belong to one session. On your computer. Next day they're all different numbers.
Watch the Symantec alert some more. If they're any good, they should tell you what the application is they see a change in. When you catch the entire alert, or extract it from the logs, post back.
Viruses can change applications.
So can you changing some program.
So can Windows updates where the vital Windows applications change as they patch the system.
Edited by tos226, 05 May 2011 - 08:43 PM.