Unsolved

This post is more than 5 years old

16300

October 10th, 2003 19:00

Symantec Onlive Virus Scan Will Not Run

Hey All,

My computer was acting a little strangely, so I did a complete system scan using my Norton Antivirus.  Results were negative.  No viruses found.

Something still seemed wrong so I went online and did scans using several different sites: RAV, HouseCall, Panda and PC Pit Stop.  The results were the W32/EnerKaz virus was found in two system restore folders (W32.HLLW.Sambut (Symantec) ), and two Trojans, ByteVerify and JDPack were found in JAVA deployment folder.

After several trips to both the Symantec and McAfee virus definitions sites and several days of exhausting file and registry search, I was unable to find any evidence of viral execution.  None of the payload files or registry modifications had been made.  So, after deleting all of the infected files, I reran the scans at the online sites.  Results: no viruses found.

Since this is my very first experience with viruses, naturally I am concerned that my NAV has been compromised.  The online VirusScan at Symantec will not run.  The online security check runs fine, and the components for the virus can download but the scan does not run.

I am wondering if I should uninstall then reinstall my NAV or check with Symantec to see if there may be another reason why the online scan does not run.

By the way, the viruses were downloaded by my (thirty years old and should know better) son.  I have rectified that problem.

Any suggestions or ideas would be welcome most appreciatively.

Thanks in advance.

2 Intern

 • 

3.9K Posts

October 10th, 2003 20:00

Follow the link below to my web site for general computer safety.

You must keep your virus signature files uptodate, do daily updates, if not running the auto feature of your AV.

BUT no AV is going to give you 100% security. New virus's spread very fast now, and your AV WILL be out of date for that new one, a firewall plus good email safety use is also needed.

5 Posts

October 10th, 2003 21:00

I'm switching anti-virus software and need advice. Is there a specific board or discussion thread which is current and relevant to this subject? I need it for two separate computers and suppose I'll need two separate installations, paying for each? One needs a firewall, one is XP and doesn't? I'm thinking of Norton Antivirus 2003 or 2004. Help?

2 Intern

 • 

3.9K Posts

October 10th, 2003 21:00

Follow the link to my website below (computer safety online), it has info on lots of AV software mostly by ryri another DellTalk regular here. The best place for any descusion would be the new virus Information and removal board. :- http://forums.us.dell.com/supportforums/board?board.id=si_virus

 

October 10th, 2003 22:00

Hey ChrisRLG,

I use LiveUpdate automatically to ensure current virus definitions, and I'm even paranoid about that, so I run LiveUpdate manually, too.

The viruses were downloaded by my son, who disabled NAV.  He's 30 and I really didn't think I'd have to password lock Norton ( a mistake I'll not repeat.) which I have now done.  Although this is my first run-in with a virus, I'm pretty adept at problem solving wioth computer programs.

I like NAV and have used it in several variations on three different machines, with OS's dating back as far as Windows 3.1.

I would truly appreciate your thoughts on whether you think my current NAV has been compromised (see original post) or if it may be necessary to uninstall/reinstall it.  Or perhaps it is fine and there is some other reason why Symantec's online virus scanner will not function.

Thanks again for your response(s).

2 Intern

 • 

3.9K Posts

October 11th, 2003 18:00

Hi SpotCheckBilly

I don't think that Norton is compromised. But you have to remember the blaster virus went round the AV's to install. The only thing that would stop it was the firewall's. The AV's like norton AV could remove once spotted, but they could not stop it braking in.

An AV by its self is not sufficant now days.

I use a NAT router, which provides 'some' of the functions of a firewall (at least similar to the winXP one which is incoming).
I use SpywareBlaster & Spybot S&D to immunize for lots of spyware which a lot of the virus writers have moved on to.
I use SpywareGuard as a runtime spyware catcher.
I use weekly Spybot S&D and Ad-Aware to clear tracking cookies etc.
I use AVG6 anti-virus with daily update checks.
I use Outpost firewall.
I don't open attachments from anyone I KNOW without expecting the attachment. Delete all others.
I don't share my drives with anyone (kaZaA etc)
But I am paranoid about virus and spyware.

Your norton deleted the virus, you must remember that the system restore is designed to enable you to recover files that have been deleted. I beleive if moved first to a virus vault, and then delete it would not get into the system restore.

When you get and clear a virus it is offen a task to turn off and restart the system restore function.

October 12th, 2003 07:00

Hey ChrisRLG,

Thanks for your thoughts and insight.  I use ZoneAlarm freebie firewall and am going to be behind a hardware firewall soon. I tried ZA Pro 4, but did not spend enough time learning its intricacies.  I may try it again AFTER I read the directions.  LOL

I use Adaware and Spybot S&D, but have not tried the others you mention.  I looked for signs of the blaster, but found none.  The main reason I wondered if my NAV had been compromised is because I was(am still) unable to use Symantec's online scan.  And still have no idea why.  Online scans from several sites work fine and apparently my machine has a clean bill of health.

Since there are three of us using the same computer, I run Asaware and Spybot twice a week.  I have not tried the immunize feature of Spybot yet, but I have a long list of blocked sites in my IE privacy settings.

I have put a stop to my son being able to download....anything, so I'm confident that I can avoid further contamination (He disabled NAV to download, whatever it was that was infected.).  I'm going to network his computer to my cable access, so if he wants to download stuff with no AV, he can wreck his own computer.  There will be NO file sharing between the two machines.

At any rate, thanks again for your thoughts.  They are greatly appreciated.

2 Intern

 • 

3.9K Posts

October 12th, 2003 22:00

SpotCheckBilly

Watch out when you use the immunize feature (from spybots advanced menu) as two of the check mark options can be flaged by ad-aware as problems. Do a clean with both so that you know they are clear, set the immunizations in spybot, run ad-aware again and the two problems it then finds should be added to ad-awares ignor list.

October 13th, 2003 06:00

Hey Chris,

Thanks for the heads up on Spybots immunize feature.

April 9th, 2004 14:00

there is a free antivirus program you can down load go to grisoft.com and download the free avg it is better then norton and mac.
No Events found!

Top