I am unable to turn on Norton Personal Firewall "Intrusion Detection" on Windows 2000 Pro

Greetings wise wizards of EE:

I am helping a friend with a small retail business, who had no security software on his Windows 2000 Pro PC. I convinced him to purchased Norton Internet Security (2004). Once we installed and ran a scan, the following threats were detected: the W32.Blasterworm (detected & removed) & W32.Spybot Worm (detected, but unable to remove), and PRESUMED removed after running "Live Update" with a second scan, as there was no further indication it existed. With that said, here's my problem:

I am unable to turn on the "Intrusion Detection" section of Norton Personal Firewall. When I attempt to do so, I get a message that reads: "Failed to save setting: Please verify that your Windows account is not restricted". I've tried to research this message on the Symantec site, but I've had little success. The most info I could gather from them is that a possible previous threat is preventing Intrusion Detection from activating.

Please enlighten me with a solution, if one exists...many thanks,

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Paul SDesktop Support Manager / Network AdministratorCommented:

This is not the answer you are looking for, but you should know this anyways:

From my experience ( i fix computer all day long) Norton Internet Security is lame software that causes more problems than help.
There are many free alternatives that do a better job. why pay more to get less?


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Asta CuTechnical consultant & graphic designCommented:
Prior to attempting any 'clean' process .... did you disable System Restore?  If not, the problem will return.  Please see this about Windows 2000 and the System Restore function.

Try running the Viruscan (with all definition updates) in SAFE MODE, all drives and deep scanning.

Also check for Spyware/malware and malicious BHOs.  Be sure to clear the Browser's cache (all) including temp files, history files, autocomplete, etc.

Tools that work for me here.... again, it's very important, turn off system restore before doing this and Spyware fixes, or the problem will return. Once cleaned, you should enable System Restore again.

If unwanted Pop Ups arise, and Browser is hijacked, the quickest way to close the Browser window is ALT+F4.

This is a central link here compiled by a number of our Experts with Spyware tools, links and cautions/recommendations:
HijackThis can scan your system and create a log (and fix some things) ... once this log is created, post the log results in this free analyzer:
This is the HijackThis Guideline and process that makes sense to me:

Once you've run the log through the Analyzer, you're guided for the most part with recommendations, and some can be fixed by HijackThis, but some may show as "nasty" which aren't and may cause problems for you. So do encourage you to read the above link for cautions on this. Let us know only the line items which need further analysis by us.

My personal choices on the Spyware/Malware and Malicious BHO issue is to use these two programs:
AdAware (I chose the paid version which is SE Professional) but both also have free versions and always welcome contributions. Be sure it is the most current and updated, also make sure you configure it to do Deep Scanning and
to include the HOSTS file. For Spybot S&D, if you choose that, be sure to update it and use the Immunize function to block @ 2500 spyware/malware/Malicious BHYO intrusions.  If you've already run this before and used the Immunize function, be sure to get updates and immunize again to get the 'new' intrusions incluced.

Hope this is of help to you. Best wishes, listening further when time permits.

WindowsUpdate is ALWAYS your first best visit.

zovothAuthor Commented:
Greetings wise wizards The Computer Guru 777 and astaec:

Many thanks to you both for your help in solving my "instrusion detection" dilemma. I am most grateful indeed. Tomorrow I shall implement your suggestions, and I am confident it will be resolved, now that you have shown me the correct path to take. I increased the point value for this question and split it among you both.

I chose The Computer Guru 777's as the accepted answer, as he answered first and provided an extremely helpful link to solving the exact problem through the Symantec site. I also greatly appreciate your free alternatives link, which I will investigate, once I get my friend's Internet Security back on track.

I want to give astaec a special thanks for the bounty of useful Internet removal tools...those links lead to some excellent resources, of which I know I'll have need of. I do have one question though...you suggested that I disable my friend's System Restore on his Windows 2000 PC...according to the Microsoft link you provided, it doesn't appear that Windows 2000 possesses System Restore...the link states only Windows ME and XP have it...did I interpret that wrong? Please enlighten if you would be so kind.

Thanks again to you both,

Paul SDesktop Support Manager / Network AdministratorCommented:
Windows 2000 does not have system restore. XP and ME do. Glad to be of assistance.
Asta CuTechnical consultant & graphic designCommented:
Thank you as well, happy to have been of some help to you.  The link above which was a System Restore equivalen FAQ was sourced from Microsoft's Windows 2000 resources; this may be more helpful to you.
How To Use the Backup Program to Back Up and Restore the System State in Windows 2000

":0) Asta
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.