Live Chat & Podcast at 1:00PM Eastern on Sunday!
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
General Security
Tag Cloud
access acer asus bios bsod computer crash desktop driver drivers error ethernet excel freeze gaming hard drive hardware hdmi internet laptop malware memory modem monitor motherboard mouse network printer problem ram registry repair router slow software sound trojan ubuntu 11.10 uninstall usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
Norton Warning?

Reply  
Thread Tools
needafix's Avatar
needafix has a Photo Album
Senior Member with 985 posts.
 
Join Date: Mar 2005
Experience: Advanced
30-Jun-2008, 01:13 AM #1
Norton Warning?
Is this image a legitimate Norton warning?

http://forums.techguy.org/members/182183-needafix-album66-stuff.html

(upload as attachment isn't working)

I'm a bit suspicious because at the time I had all of Nortons start up files and *.vxd's disabled.

If this is legit, Norton is running invisibly and cannot be shut off. I don't like that since it could lead to problems diagnosing things.
Byteman's Avatar
Moderator & Malware Removal Specialist with 17,387 posts.
 
Join Date: Jan 2002
Location: NY
Experience: Junkware Jouster
01-Jul-2008, 12:31 AM #2
Hi,

Norton will usually put up an alert about a .vbs script, such as SilentRunners.vbs uses..... when we were using SilentRunners.vbs often, our canned replies always included a warning note to ALLOW the script, not block it, since that would block what we were trying to run.

Here's a link to another post about the same type of alert, worded exactly the same:

http://forums.spybot.info/showthread.php?t=765&page=2


**What version of Windows are you using?

.
__________________
Mung (computer term), the act of making several incremental changes to an item that combine to destroy it
Donate directly to help the site TSG Library
TSG's Welcome Guide- Tips, Rules, How to use TSG and more!

Last edited by Byteman; 01-Jul-2008 at 01:20 AM..
TechOutsider's Avatar
Computer Specs
Account Disabled with 303 posts.
 
Join Date: Jun 2008
Location: Florida
Experience: Advanced
01-Jul-2008, 12:53 PM #3
what version of norton?
needafix's Avatar
needafix has a Photo Album
Senior Member with 985 posts.
 
Join Date: Mar 2005
Experience: Advanced
02-Jul-2008, 11:29 AM #4
It is the upgraded version of Norton 2005 that expires in 2009.

I renamed all Norton and Symantec folders and renamed navui.nsi, nmain.exe, Navw32.exe.

Now I can run Silentrunners without a looong delay.

That is what I don't like, everything I do is delayed or in other terms appears to be "hanging up."

I am trying to diagnose the "hang ups" and it turns out that it was the secret and invisible Norton doing it.

If I want it off that means off, not running behind my back while it or any of its .dll's are running invisibly, never appearing in any process viewer while I am trying to diagnose computer issues.

As far as that goes it behaves exactly like spyware reinstalling itself because there is no difference in that and turning off a program but yet it is not off and running invisibly all the time.

With behavior like that, I think Norton is just giving the malware industry a method of running invisibly and all they have to do is pick apart Norton to find out how its done and duplicate it.
needafix's Avatar
needafix has a Photo Album
Senior Member with 985 posts.
 
Join Date: Mar 2005
Experience: Advanced
11-Jul-2008, 12:45 PM #5
I still would like to know why Norton is running invisibly and running against the users wishes (at least my wishes anyway) an especially after disabling every .vxd, .exe and .dll that Norton uses.

What is the difference between that and some form of clandestine malware?

If Norton is not purposely programmed to behave in this fashion then that malicious script warning is a fake.

Which one is it?
Byteman's Avatar
Moderator & Malware Removal Specialist with 17,387 posts.
 
Join Date: Jan 2002
Location: NY
Experience: Junkware Jouster
12-Jul-2008, 12:32 AM #6
Hi,
The alert snapshot you sent looks legit, and worded exactly the same as it should be, so it looks like there is a Norton program installed...perhaps it came with the computer.

Probably what you did did not fully turn it off, the Services control the program and what is enabled....if it's on an XP type computer...

I am not sure you will have much success removing it all unless you name the files back to what they were....I can't say, but we can try.


go to Click here to download HJTsetup.exe
  • On that page, click the icon
  • at lower right , and follow the prompts to get the installer version
  • Save HJTsetup.exe to your desktop.
  • Double click on the HJTsetup.exe icon on your desktop.
  • By default it will install to C:\Program Files\Hijack This.
  • Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
  • Put a check by Create a desktop icon then click Next again.
  • Continue to follow the rest of the prompts from there.
  • At the final dialogue box click Finish and it will launch Hijack This.
  • Click on the Do a system scan and save a log file button. It will scan and then save the log and then the log will open in Notepad.
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
  • Paste the log in your next reply.
  • Don't use the Analyse This button, its findings are dangerous if misinterpreted.
  • DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

Don't forget this second part:

_ _ _ _
Please also do this:
  • Open Hijack This and click on the "Open the Misc Tools section" button.
  • Click on the "Open Uninstall Manager" button.
  • Click the "Save List" button. After you click the "Save List" button, you will be asked where to save the file. Pick a place to save it then the list should open in notepad.
  • Copy and paste that list here in your reply
__________________
Mung (computer term), the act of making several incremental changes to an item that combine to destroy it
Donate directly to help the site TSG Library
TSG's Welcome Guide- Tips, Rules, How to use TSG and more!
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 12:38 AM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.