Louverril
asked on
Norton Internet Security Program Control Pop ups
My PC was becoming unusable due to Norton IS bombarding me with Program Control warnings "A remote system is attempting to access your computer".
I've tried the application help, the symantec web site (with no luck) and also some other Q and A sites - there seems to people with the same problem, but none of the suggestions work. I've tried all the suggestions on this site - there was a similar question, but I think they were using the professional version of the software, mine's just plain and simple Norton IS 2004 - but none of them work.
The only suggestion that sort of helped and enables me to use my PC is to move the pop up window to the bottom of my screen and not respond to the messages. However I suspect that this is causing problems with the software and maybe slowing down my PC (but maybe I'm paranoid). It also takes me roughly 1 hour to close down all the alerts at the end of the week when I shut down my PC!
I really can't understand how you are expected to use the software in this state - there must be an answer, but I've trawled everywhere. One person who asked Norton (at some cost alledgedly) was told (alledgedly)it was a feature of the software and he/she should be glad he was warned. I did try sending an e-mail to Symantec but over a week later I have recieved no reply.
I see the question about removing the firewall part of Norton IS and it seems that this is not possible without also removing the antivirus software. I could replace the firewall with a copy of McAffee I am entitled to via AOL but I would have to pay for another virus checker.
I hope someone can help.
I've tried the application help, the symantec web site (with no luck) and also some other Q and A sites - there seems to people with the same problem, but none of the suggestions work. I've tried all the suggestions on this site - there was a similar question, but I think they were using the professional version of the software, mine's just plain and simple Norton IS 2004 - but none of them work.
The only suggestion that sort of helped and enables me to use my PC is to move the pop up window to the bottom of my screen and not respond to the messages. However I suspect that this is causing problems with the software and maybe slowing down my PC (but maybe I'm paranoid). It also takes me roughly 1 hour to close down all the alerts at the end of the week when I shut down my PC!
I really can't understand how you are expected to use the software in this state - there must be an answer, but I've trawled everywhere. One person who asked Norton (at some cost alledgedly) was told (alledgedly)it was a feature of the software and he/she should be glad he was warned. I did try sending an e-mail to Symantec but over a week later I have recieved no reply.
I see the question about removing the firewall part of Norton IS and it seems that this is not possible without also removing the antivirus software. I could replace the firewall with a copy of McAffee I am entitled to via AOL but I would have to pay for another virus checker.
I hope someone can help.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Point noted luv2smile.
I'm too tired to contemplate SP4 tonight. However I promise I will look at drivers, system back ups, potential lost /annoyed customer, the level of my savings for a new PC etc... asap.
If it is possible with this message board, I'll let you know how I got on (presuming I still can!).
Thanks
I'm too tired to contemplate SP4 tonight. However I promise I will look at drivers, system back ups, potential lost /annoyed customer, the level of my savings for a new PC etc... asap.
If it is possible with this message board, I'll let you know how I got on (presuming I still can!).
Thanks
Just curious, what service pack is your machine running?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
You can go to add/remove programs in the control panel and from there you can choose to delete only certain parts of of NIS. I've done this to remove the antivirus part, but keep the firewall.
Of course I wouldn't advise removing the firewall until you have another one installed.
ASKER
Luvtosmile - it's SP1 (from memory - I've forgotten how to check) Don't laugh.
ASKER
Thanks all for the suggestions - theres a lot to try there. I must get something to eat. See you tomorrow.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Have installed SP4. No probelms with that!!! Re-installed Norton because I was denied access to turn Intruder detection back on (somehow it had been turned off...) The reinstall fixed it for a while then the detection was turned off while I was getting the updates for Norton. I cannot turn it back on - no matter who I'm logged on as.
Not sure If I'm protected with the Detection off (but the firewall on)? Just got a security alert for WinCrash trojan. Don't know whether Norton was just telling me or blocking it.
Before the alert. I've updated and run spybot but it found nothing . Getting a bit panicy now.
There is an update from Norton for Intrusion Detection that won't download when running Liveupdate. Get error LU1845 which is a subscription error - but all the other updates came down OK.
Scarted of connecting to the internet logged on as administrator to get some more Windows updates.
Not sure If I'm protected with the Detection off (but the firewall on)? Just got a security alert for WinCrash trojan. Don't know whether Norton was just telling me or blocking it.
Before the alert. I've updated and run spybot but it found nothing . Getting a bit panicy now.
There is an update from Norton for Intrusion Detection that won't download when running Liveupdate. Get error LU1845 which is a subscription error - but all the other updates came down OK.
Scarted of connecting to the internet logged on as administrator to get some more Windows updates.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
OK Thanks for the suggestions. The current status is as follows:
Win 2000 - all current security patches applied
Norton IS all latest updates applied except intrusion detection (get error lu1845)
Am unable to turn intrusion detection on ("falied to save setting. Please verify that your windows account is not restricted") - even when logged on as administrator
Firewall set to highest security ("block everything until you allow it)
Norton IS log shows Wincrash trojan (ref earlier posting) and netbus trojan were blocked. I had recieved a "security alert", ref posting above - didn't know if this meant it had been blocked.
Virus system scan finds no problems
Virus Autoprotect is on
Up to date Spybot scan reveals no problems (immunised)
I log onto the interent as a user (except for live update - have to be on as Administrator).
I believe I'm quite well protected (on a temporary basis) with the above settings - what do you think??
In order to cure the problem with intrusion detection Symantec advise that I uninstall manually - following instructions found when you enter 2004020314035036 in the search on thier website - to COMPLETELY remove product before reinstalling.
I think that the original problem may (and I mean may) not have been a security threat but caused by an update to the NIS software (via live update). REASONING: I noticed when I re-installed Norton the first time that you have no choice but to locate some of the files in "Program Files". I have two operating systems on my PC (a fix to get round the problems caused last year applying the MS service pack - see other closed posting!!)). I was advised when I created the second OS to call the program files folder something different (same partition), so I called it "program files new". I think that one of the Norton updates might be getting confused with software running on the other operating system???
Although its tempting to just scrap NIS, I want to solve this. I propose to follow symantecs advice but making sure that all symantec stuff is also completey removed from the second OS.
Any comments?
Win 2000 - all current security patches applied
Norton IS all latest updates applied except intrusion detection (get error lu1845)
Am unable to turn intrusion detection on ("falied to save setting. Please verify that your windows account is not restricted") - even when logged on as administrator
Firewall set to highest security ("block everything until you allow it)
Norton IS log shows Wincrash trojan (ref earlier posting) and netbus trojan were blocked. I had recieved a "security alert", ref posting above - didn't know if this meant it had been blocked.
Virus system scan finds no problems
Virus Autoprotect is on
Up to date Spybot scan reveals no problems (immunised)
I log onto the interent as a user (except for live update - have to be on as Administrator).
I believe I'm quite well protected (on a temporary basis) with the above settings - what do you think??
In order to cure the problem with intrusion detection Symantec advise that I uninstall manually - following instructions found when you enter 2004020314035036 in the search on thier website - to COMPLETELY remove product before reinstalling.
I think that the original problem may (and I mean may) not have been a security threat but caused by an update to the NIS software (via live update). REASONING: I noticed when I re-installed Norton the first time that you have no choice but to locate some of the files in "Program Files". I have two operating systems on my PC (a fix to get round the problems caused last year applying the MS service pack - see other closed posting!!)). I was advised when I created the second OS to call the program files folder something different (same partition), so I called it "program files new". I think that one of the Norton updates might be getting confused with software running on the other operating system???
Although its tempting to just scrap NIS, I want to solve this. I propose to follow symantecs advice but making sure that all symantec stuff is also completey removed from the second OS.
Any comments?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Live update runs OK - EXCEPT it will not download an intrusion detection update.
What do you mean that the "ports are still open on your computer" This sounds bad, but you say any firewall will block them? NB: The virus scan has never found any viruses on my compter so I don't think I was ever infected (?)
Also maybe I'm only protected again old trojans - i.e. ones that NIS has the signatures for? Or will the firewall itself protect against all of them. I'M UNCLEAR WHAT NIS INTRUSION DETECTION does above what the firewall does - does it block extra things or is it's function just to tell you what was blocked, and if thats the case what told me the two trojans were blocked, when intrusion detection isn't running?. I don't understand.
Symantec say that using the Control Panel remove program does not remove all traces of NIS. The instructions they give to remove it manually are certainly comprehensive. I reckon it will take a long time esp. as when I reinstall it I have to get all the updates down again. I reckon about 5 hours. My PC takes ages to reboot.
If it doesn't work I'll...........
So if any one has any more advice PLEASE let me have it, before I start tomorrow morning.
Thanks.
What do you mean that the "ports are still open on your computer" This sounds bad, but you say any firewall will block them? NB: The virus scan has never found any viruses on my compter so I don't think I was ever infected (?)
Also maybe I'm only protected again old trojans - i.e. ones that NIS has the signatures for? Or will the firewall itself protect against all of them. I'M UNCLEAR WHAT NIS INTRUSION DETECTION does above what the firewall does - does it block extra things or is it's function just to tell you what was blocked, and if thats the case what told me the two trojans were blocked, when intrusion detection isn't running?. I don't understand.
Symantec say that using the Control Panel remove program does not remove all traces of NIS. The instructions they give to remove it manually are certainly comprehensive. I reckon it will take a long time esp. as when I reinstall it I have to get all the updates down again. I reckon about 5 hours. My PC takes ages to reboot.
If it doesn't work I'll...........
So if any one has any more advice PLEASE let me have it, before I start tomorrow morning.
Thanks.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks verty much Knoxj81 for this information and explanation. I feel better now that at least the firewall seems to be blocking attacks. I can type more slowly!!!
I ran all the Sygate checks (Quick, Stealth and Trojan) and they are OK. All ports were blocked. The only thing that could be found was my IP address.
I haven't done the MS one but I will.
I think the two trojans may have been a hang over from before I applied the 2000 security updates. Somehow they knew where I was even thought the ports are now blocked? I dont know.
SheharyaarSaahil - yes I tried adding other accounts - unrestricted Administrator accounts. The strange thing is that the original instal of NIS put some of the files under the doucments andsetting sfor the account I used to install it. This is another reason why I am suspicious of the two OS's on my system causing a problem.
Will let you know how I get on with the re-install.
Thanks
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Well what fun I have had.
I went ahead and tried to remove NIS (again). Rather than follow the instructions for manual removal I thought I'd try a control panel removal first and then clean up with the manual instructions.
Result - my whole OS is totally messed up! 75% of the programs just disappeared, including AOL, spybot, MS Office etc... Some remained like Ahead Nero. I am using an older version of AOL that was installed on the other OS (running from this OS...)
Honesty all I did was remove NIS in Add/Remove programs and restart. Either NIS really just doesn't like 2 OS anymore - I've been running it that way since Feb this year - or I had a virus that the latest NAV signatures couldn't spot, or ???
Anyway the whole things unstable. I've decided to reinstall the system from scratch.
I have:
the original sony product back up/recovery disks for this laptop
the windows 2000 upgrade disk
Windows SP4
I thought Id just shove them in one after the other followed by the application disks - luckily I have MOST of them.
ANY ADVICE ON RESTORING THE SYSTEM - I've never done this before (not since DOS and Win 3.1 anyway!!!). I suppose I to shouldn't try format the hard disk, just put the recovery disk in??
Should I start a new posting - I'm new to this website?
(In the meantime I installed mcaffee firewall (because I had it) and got AVG running as you advised).
I went ahead and tried to remove NIS (again). Rather than follow the instructions for manual removal I thought I'd try a control panel removal first and then clean up with the manual instructions.
Result - my whole OS is totally messed up! 75% of the programs just disappeared, including AOL, spybot, MS Office etc... Some remained like Ahead Nero. I am using an older version of AOL that was installed on the other OS (running from this OS...)
Honesty all I did was remove NIS in Add/Remove programs and restart. Either NIS really just doesn't like 2 OS anymore - I've been running it that way since Feb this year - or I had a virus that the latest NAV signatures couldn't spot, or ???
Anyway the whole things unstable. I've decided to reinstall the system from scratch.
I have:
the original sony product back up/recovery disks for this laptop
the windows 2000 upgrade disk
Windows SP4
I thought Id just shove them in one after the other followed by the application disks - luckily I have MOST of them.
ANY ADVICE ON RESTORING THE SYSTEM - I've never done this before (not since DOS and Win 3.1 anyway!!!). I suppose I to shouldn't try format the hard disk, just put the recovery disk in??
Should I start a new posting - I'm new to this website?
(In the meantime I installed mcaffee firewall (because I had it) and got AVG running as you advised).
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
All data backed up - luckily the external USB CD r/w still works.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
My last comment letting you know what happened seems to have disappeared. I also hope I did the points thing OK. I tried to just divide the points up between the people but I had to divide them amongst all the responses - I tried to do this and achieve the same number of points (had to get the calculater out....) Anyway all these assisted answers have come up. Hope I haven't upset anybody. Thanks to you all...
Anyway, just incase you're interested, after sometime I managed to get the system back. It took ages becuase of having to put Win 98 on first and then Win 2k knocking out several drivers. Ended up re-installing NIS - because I've paid for it. Not very happy with NIS - it stopped me getting a virus or whatever but it totally wrecked my PC when I tried to uninstall/ It also went wobbly when I re-installed it on the rebuiilt PC for a whilke but corrected itself.
I'll certainly consider another product when my subscription is due.
Thanks again.
Anyway, just incase you're interested, after sometime I managed to get the system back. It took ages becuase of having to put Win 98 on first and then Win 2k knocking out several drivers. Ended up re-installing NIS - because I've paid for it. Not very happy with NIS - it stopped me getting a virus or whatever but it totally wrecked my PC when I tried to uninstall/ It also went wobbly when I re-installed it on the rebuiilt PC for a whilke but corrected itself.
I'll certainly consider another product when my subscription is due.
Thanks again.
Just glad to hear you're up and running again. Norton has turned off quite a few people. I seem to be one of the luckier ones, I've had no more trouble then I have using any other AV.
Thanks!
Thanks!
ASKER
These pop ups have gradually increased as I used the software. I had a few at the beginning but not the level I have now. NB I have ran Spybot and a full virus scan (with uptodate definitions).
I couln't get the list the way you described msconfig was not recognised however I tried something else (services.msc /s) and got a list including the following all with a description of symantec.
Symantec Core LC
Symantec event manager
Symantec Netwroks Drivers Service
Symantec Network Proxy
Symantec Password Validation
Symantec Settings Manager
SymWMI service
all were listed as started apart from the password validation and WMI service.