Symantec antivirus client

Question

Hi

I have Symantecs antivirus client software installed on my powervault 725. It isn't working though. When I set a scan running, it starts scanning the boot sector, but doesn't scan any files, and doesn't progress beyond there. Can someone tell me why it's not working, and how to fix it?

Thanks

ChrisRLG · Answer

have you run 'error checking' on the machine

DoubleClick the my computer icon

right click the c:\ drive - Properties - tools - error checking.
==========================
If that finds nothing - provide a hijackthis log please
==========================
Use these to remove Malware (Virus, Spyware and Adware).

First :-
Spybot S&D and Ad-aware using the settings and links provided
Here

Failing those solving your problems a post of a hijackthis log for the experts to advise.
HijackThis From Here
or one of these other links:-
http://www.merijn.org/files/hijackthis.zip
http://www.aluriasoftware.com/tools/hijackthis.zip
http://mjc1.com/mirror/hjt/

Important: Create a folder on the C: drive called C:\HJT.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HJT. Unzip HijackThis into this folder. (See this link for graphical instructions)
Then run, scan, save log, then in notepad copy the FULL log by copy and paste as a reply to this post and an expert with HijackThis Knowldge, will have a go at giving advice. A lot of posters make mistakes here in copying and pasting so reread the left info sidebar called Copy and Paste
Please note the list of experts names below, very few forum regulars here have had this training.

DO NOT FIX ANYTHING WITH HIJACKTHIS WITHOUT EXPERT ADVICE, most of what it finds you need for normal MS Windows tasks.

Known Spyware HijackThis fighters in DellTalk - If you are, and are not on the list please PM Me.

TomCoyote (of http://tomcoyote.org/forums/index.php fame)
YoKenny (Expert at TomCoyotes, Trusted Advisor Spywareinfo)
baskar1234 (Teaching Assistant at TomCoyotes, Trusted Advisor Spywareinfo)
ChrisRLG (Classroom Coordinator at TomCoyotes, Trusted Advisor Spywareinfo)
Tuxedo Jack (Teaching Assistant at TomCoyotes, Trusted Advisor Spywareinfo)
Yellowhammer (Trusted Advisor at Net-Integration, First Responder at Computer Cops)
tashi (Teaching Assistant at TomCoyotes, Trusted Advisor Spywareinfo)
therock247uk (In Training at TomCoyotes and Spywareinfo)
irelynmisses (In Training at TomCoyotes and Spywareinfo)
Texruss (In Training at TomCoyotes and Spywareinfo) - Regular poster at DellTalk
PGPhantom (In Training at TomCoyotes, Trusted Advisor Spywareinfo)

You could also go to one of the more specalist forums where more experts will be able to help.
http://tomcoyote.com/forums/index.php
http://forums.spywareinfo.com/index.php
http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi (Home of Spybot S&D)
http://boards.cexx.org/index.php
http://www.wilderssecurity.com/index.php
Do read the sites FAQ before posting, and advise your problem and what steps you have already done to try to cure your problem.

I, and the other hijack experts mentioned above, are in all those sites (and more) with the same login names. You might get one of us at those sites also to anwser your log, but other experts will also be available.

andylarks · Answer

Ok, I ran a checkdisk, no problems on the disks at all. Any other ideas? Thanks

ChrisRLG · Answer

Hijackthis log as suggested before.

ChrisRLG · Answer

I assume you are happy that the IP addresses and Domain names are OK. Some malware do change those.

If you are unsure and wish me to check those - send me them by Private Message - from the top of this forum.
=======================
You don't have much else in your hijackthis log, did you produce this from a clean boot or is this after leaving lots of other programs running. You have lots of processes running and very little in the log to trigger them starting, although none of them shout malware to me.

If that is how it should be, I think you have a hardware fault - not malware.

andylarks · Answer

oops :'> missed that bit! ok, here it is, (I've *'d out ip addresses and domains): Logfile of HijackThis v1.97.7 Scan saved at 3:09:29 PM, on 5/10/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\System32\bmss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32	ermsrv.exe C:\Program Files\Sygate\SPF\smc.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\system32\msdtc.exe C:\WINNT\system32\serverappliance\appmgr.exe C:\SFU\common\cron.exe c:\progra~1\dell\dcledsvc\dcledsvc.exe C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe c:\Dell\Kickstart\ksagent.exe C:\WINNT\system32\diskmon.exe C:\WINNT\system32\serverappliance\elementmgr.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\llssrv.exe C:\Program Files\Dell\OpenManage\Array Manager\mr2kserv.exe C:\WINNT\System32
fssvc.exe C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe C:\WINNT\System32\serverappliance\psmserv.exe C:\WINNT\system32egsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\System32\snmp.exe C:\WINNT\system32\serverappliance\srvcsurg.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\smlogsvc.exe C:\Program Files\Dell\OpenManage\Array Manager\VxSvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\Dfssvc.exe C:\WINNT\System32\inetsrv\inetinfo.exe C:\SFU\Mapper\mapsvc.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\logon.scr C:\WINNT\System32\svchost.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32dpclip.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\BacsTray.exe C:\PROGRA~1\Sygate\SPF\smc.exe C:\Dell\AdvAdmin\AppMenu.exe C:\WINNT\system32\mshta.exe C:\Documents and Settings\elal\Desktop\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://support.dell.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://support.dell.com/ F2 - REG:system.ini: UserInit=C:\WINNT\system32\userinit.exe O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O4 - HKLM\..\Run: [bacstray] BacsTray.exe O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe O4 - Global Startup: Advanced Administration Menu.lnk = C:\Dell\AdvAdmin\AppMenu.exe O9 - Extra button: Related (HKLM) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) O14 - IERESET.INF: START_PAGE_URL=http://support.dell.com/ O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ********* O17 - HKLM\System\CCS\Services\Tcpip\..\{A69A98DF-3A4E-4CBF-8653-B86C980045A4}: NameServer = *********,*********,********* O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = *********.ac.uk O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = *********.ac.uk,ac.uk,uk O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = *********.ac.uk O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = *********.ac.uk,ac.uk,uk

ChrisRLG · Answer

Try this boardhttp://forums.us.dell.com/supportforums?category.id=powervault They may be able to help - sorry I don't know any of the experts on that board.They may know of a known fault or can advise what to check.Do let them know that I have checked you for malware and that you are clean.

andylarks · Answer

Hardware problem? This is a brand new server! It arrived about a month ago, and the only stuff I've done on it so far is add it to an Active Directory, copy some files, and set up some file permissions.

If this is a hardware problem, where do I go from here, who do I contact?

Thanks

Virus & Spyware

Symantec antivirus client

Was this post helpful?