• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs

Not what you are looking for? Ask the experts!

Kudos0

Norton keeps resetting my home page to symantec.

I got norton as a 90 trial on a new PC.  If this keeps happening I am quit certain that I will not countinue with norton.  I thought norton was supposed to stop programs from changing my home page, instead it is the problem.  I'm not going anywhere different with this computer that I didn't go to with my old computer and no virus or adware is being found so why does norton keep changing my home page to www.symantec.com?

edit:

Vista Home 64bit sp1. 

I have no idea which norton product it is and can't figure out where to look for that.

It doesn't happen all the time, just about once a week or so.

Message Edited by volkner on 01-19-2009 09:21 PM

Replies

Kudos0

Re: Norton keeps resetting my home page to symantec.

I got norton as a 90 trial on a new PC.  If this keeps happening I am quit certain that I will not countinue with norton.  I thought norton was supposed to stop programs from changing my home page, instead it is the problem.  I'm not going anywhere different with this computer that I didn't go to with my old computer and no virus or adware is being found so why does norton keep changing my home page to www.symantec.com?

edit:

Vista Home 64bit sp1. 

I have no idea which norton product it is and can't figure out where to look for that.

It doesn't happen all the time, just about once a week or so.

Message Edited by volkner on 01-19-2009 09:21 PM
Kudos0

Re: Norton keeps resetting my home page to symantec.

This sounds really strange. Symantec can't do that.

Please download Superantispyware and run a scan.

www.superantispyware.com

"All that we are is the result of what we have thought"
Kudos0

Re: Norton keeps resetting my home page to symantec.

Hi volkner,

 

To check whether your Internet Explorer is accessed by some threat, download Hijackthis: 

http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

You need download the third in the list (Excutable), install it and click "Do a system scan and save a log". Then open the log in Notepad. Either post the log in this same message board or send it as a private message to me.

 

Yogesh
Kudos0

Re: Norton keeps resetting my home page to symantec.

This is the HijackThis report.  Thanks for the help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:37:12 AM, on 1/20/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\1_1_3_0\RGSC.exe
C:\hp\kbd\kbd.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Eric\Documents\Tools\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=84&bd=Pavilion&pf=cndt
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~2\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: intu-help-qb1 - {9B0F96C7-2E4B-433E-ABF3-043BA1B54AE3} - C:\Program Files (x86)\Intuit\QuickBooks 2008\HelpAsyncPluggableProtocol.dll
O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - c:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Chasis Button Service (HPBtnSrv) - Unknown owner - c:\hp\HPEZBTN\HPBtnSrv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: QBCFMonitorService - Intuit - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~2\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8746 bytes

Kudos0

Re: Norton keeps resetting my home page to symantec.

Hi

I have notice by the log that some Windows services are missing, which you may have done to slipstream Vista, Or some sort of fake services created by Malware.

Start Hijackthis again and tick (check) these entries

F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe   (bad)
O1 - Hosts: ::1 localhost

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) 

O13 - Gopher Prefix:

O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing)

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)

O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) 

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

Now click "fix Checked"

If you couldn't before properly, Now Try SuperAntispyware Free, Install, Update definitions and then a full scan http://www.superantispyware.com/download.html

And there is Malwarebytes  http://malwarebytes.org/mbam.php

Quads 

Kudos0

Re: Norton keeps resetting my home page to symantec.

Thanks for the response, but it is NORTON that is changing my home page NOT adware.  I have anti-malware software installed that I having been using for many years and find to be highly effective.  I want to turn off the setting that allows norton to change my home page.  How is this done?

Yes this is my game machine.  I stream-line vista as much as I can.  You can see that those you say I should removed say things like "file missing" at the end.  It says that because I have already removed that file/software/service/etc...  Removing those now erroneous entries from the registry is a good maintanence tip, but it will not solve the problem.

Kudos1

Re: Norton keeps resetting my home page to symantec.

I think what Quads is trying to tell you is that Norton does not change your home page, doesn't care what your home page is, and has no settings to change it or not to change it.  Something else is going on.  Recommend you follow his suggestions to enable the location of the actual problem.
Under certain circumstances profanity provides relief denied even to prayer.Mark Twain
Kudos0

Re: Norton keeps resetting my home page to symantec.

I haven't come across NAV/NIS 2009 changing the Homepage to symantec. com when I was beta testing it, or from others, suddenly complaining their homepage is always Symantec.com. 

The only other thing I can think of is if it is not Malware after full scanning etc. I can't remember now but does NIS.... have  homepage protection??   Some products do. Within some security products you type in your Homepage and if it attempts to change it blocks or changes it back.

AS I SAY I have not come across Norton doing this to others etc, especially just after install.

This is an infection entry F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe   (bad)

But if you don't want to remove or scan for the files linked to it, if still there then that is your choice, No problem.

 

Quads 

Message Edited by Quads on 01-22-2009 05:21 PMMessage Edited by Quads on 01-22-2009 05:21 PM
Kudos0

Re: Norton keeps resetting my home page to symantec.

Hi Guys,

I must admit that I experienced the same thing to when I reinstalled the new N360 beta.

It redirects the homepage to a page from Symantec indeed. And I'm sure there is no malware on my machine.

I will flag this one to one of the employees

"All that we are is the result of what we have thought"
Kudos0

Re: Norton keeps resetting my home page to symantec.

Just adding this to the background:

OP in FIrst Message says: 

Vista Home 64bit sp1.

I have no idea which norton product it is and can't figure out where to look for that.

Some Norton products/versions do not support 64 bit fully?

It would help to know what product he is using ..... ?

Hugh
Kudos0

Re: Norton keeps resetting my home page to symantec.

Volkner,

<< I have no idea which norton product it is and can't figure out where to look for that. >>

There are 4 products you might be using: 

Norton 360

Norton Internet Security

Norton AntiVirus

Norton Systemworks (which contains a version of Norton AntiVirus)

and each of those has existed in different "year versions" -- ie 2006 2007 2008 2009 and or in the case of Norton 360 Ver 1 Ver 2 and now a public beta of Ver 3

It really is essential for trouble shooting to know what you are using!

In whatever it is you are using please open Help / About and tell us what it says there -- product names and version IDs which are usually in the form of nn.nn.nn.nn

As Stu has said he has asked for help from Symantec but without knowing what product you are using that is not going to be productive.

Is the product still in the trial period or did you renew the subscription? What is the URL on the Norton page it takes you to instead of your Home Page? Have youFinally please, are you in the USA or another country? If in another country did you buy the Norton product locally or from the USA.

These, and the fact that you are on a 64 bit system are all potentially relevant.

[Edited because I missed that it was a trial version with the PC]

Message Edited by huwyngr on 01-22-2009 10:54 AM
Hugh
Kudos0

Re: Norton keeps resetting my home page to symantec.

Thanks,

Found this:  version 15.5.0.23 Norton Internet Security.

Volk

Message Edited by volkner on 01-22-2009 04:02 PM
Kudos0

Re: Norton keeps resetting my home page to symantec.

OK that means it is a version of Norton Internet Security 2008 (15) and not the current NIS 2009 (16)

I don't know why you are getting that changed home page -- did you try resetting it in Internet Explorer Properties? You are using Internet Explorer as your browser aren't you?

If your free trial is due to expire shortly you might think about downloading the free trial version of NIS 2009 from here:

You can download the free trial versions from this webpage on the Symantec website

So it might be an idea to remove the trial version and replace it with the trial version to see how that goes.

Bear in mind that not all features of NIS 2009 are functional under the 64 bit version of Windows but you certainly should be able to activate and update.

I also suggest you do a search here on ["64 bit"] and on ["64 bit" +2009] with the quotes as shown read the messages about problems people have been having. I think you may find one from Symantec on features that are not fully functional yet. Note that names in red mean they are Symantec Staff.

PS

In fact a search on that first string produces this statement by one of the top Symantec Staff that XP 64 is not a supported OS for NIS 2008 so it should not have been on your machine.

ANd this one that seems to say that no Norton AV consumer products are compatible with XP 64 (but are with VISTA 64, and no doubt with Windows 7 64 in due course.

Message Edited by huwyngr on 01-22-2009 09:13 PMMessage Edited by huwyngr on 01-22-2009 09:16 PM
Hugh

Replies are locked for this thread.