topic Re: Is My NIS 2011 actually working? in Norton Internet Security / Norton AntiVirus

Is My NIS 2011 actually working?

looney — Mon, 01 Aug 2011 01:04:51 GMT

Win7...IE9.....Been using NIS 2011 since 12/10. Sometimes visit adult sites :smileysad:. I visited one and got the "malicious website blocked" page. For whatever reason, I elected to visit site (like a fool I reckon'). Does that mean I got infected? Did scan later, but came up clean. I also use MalwareBytes Free, SuperAntiSpyware Free and Ad-Aware Free as secondary scanners, all scans again clean. Would that also mean I'm ok?

Reason for post is because I no longer get "malicious website blocked" pages, though "System Status" shows "secure".

Just one more off question if I may? Is it necessary to use one of the many different online AV scanners as a 2nd opinion?

Maybe I shouldn't read so many different security site info web pages. Tends to make me too paranoid.

Thanks

Fred

Re: Is My NIS 2011 actually working?

RichD — Mon, 01 Aug 2011 01:26:23 GMT

Hi looney,

Welcome to the forum. I'm sure that there is someone here who will be able to help you.

looney wrote:
..... I also use MalwareBytes Free, SuperAntiSpyware Free
.....
... Just one more off question if I may? Is it necessary to use one of the many different online AV scanners as a 2nd opinion?

Meanwhile just a couple of comments -- MalwareBytes Free and SuperAntiSpyware Free should not cause any problems, because they apparently do not have a real-time component that would interfere with Norton. However, I'm not so sure about the various "online AV scanners" that you mention. My experience with them is that some of them leave a 'footprint' on the hard drive after they complete the online scan, and whatever they leave there can sometimes interfere with Norton.

In my recent attempt to clean my system in preparation for NIS 2011 re-install, I found various files from half a dozen different AV vendors, and I was forced to go into the system to delete all of these remnants before I could get NIS 2011 to reinstall properly. These files had been placed there when I had earlier tried some on-line scans or free trial downloads from these other vendors. The problem is that these vendors do not always remove or uninstall their products completely when the trials or quick scans are complete.

RichD

__________

Re: Is My NIS 2011 actually working?

dickevans — Mon, 01 Aug 2011 01:36:00 GMT

looney wrote:
Win7...IE9.....Been using NIS 2011 since 12/10. Sometimes visit adult sites :smileysad:. I visited one and got the "malicious website blocked" page. For whatever reason, I elected to visit site (like a fool I reckon'). Does that mean I got infected? Did scan later, but came up clean. I also use MalwareBytes Free, SuperAntiSpyware Free and Ad-Aware Free as secondary scanners, all scans again clean. Would that also mean I'm ok?

Reason for post is because I no longer get "malicious website blocked" pages, though "System Status" shows "secure".

Just one more off question if I may? Is it necessary to use one of the many different online AV scanners as a 2nd opinion?

Maybe I shouldn't read so many different security site info web pages. Tends to make me too paranoid.

Thanks
Fred

Welcome Fred,

Your visit may not have infected your computer this time but it did designate the site as 'allowed'. This could cause problems in the future. I'm very happy to hear that the scans gave you a clean bill.

I'm not a big fan of online scanners but I do keep Malwarebytes free version installed and current so that I can get an immediate second opinion. I also have Norton DNS installed. It seems to react faster than NIS so I don't even get a chance to visit places I shouldn't be - at least for the health of my computer. If I need malware of other 'nasties' for testing I can get them from places that I can trust :smileywink:

Nothing wrong with reading all of the information available. Just don't take the sales pitch for more than it actually is - an attempt to get you to part with your money. Every company does it and some are more polite about it than others.

Hope this helps

Re: Is My NIS 2011 actually working?

SendOfJive — Mon, 01 Aug 2011 01:58:03 GMT

Hi looney,

Norton page blocks are based on a site's reputation. A page block tells you that the site you are visiting has been known to host malware in the past. You may or may not be attacked if you click through. Visiting such sites is risky but doesn't automatically mean you will be attacked, or if you are attacked, that you will become infected. If you are going to visit these sites you would be wise to disable JavaScript, run with limited privileges and make sure that all of your applications and your operating system are fully patched with security updates.

It is smart to occasionally run a second on-demand scanner. No security product catches 100% of the threats that you might encounter, so second opinions can sometimes be useful. Don't overload your computer with security apps though. You would be much better off using sensible precautions in your browsing habits, rather than relying on a vast array of software to protect you.

Re: Is My NIS 2011 actually working?

Bombastus — Mon, 01 Aug 2011 03:51:47 GMT

You can test the malicious web page blocking by trying to visit the following test site:

http://www.spycar.org/

It is completly harmless, made for testing purposes just as this. Norton should block it.

Re: Is My NIS 2011 actually working?

Bombastus — Mon, 01 Aug 2011 03:52:43 GMT

Your visit may not have infected your computer this time but it did designate the site as 'allowed'. This could cause problems in the future.

This is reset upon a reboot, though.

Re: Is My NIS 2011 actually working?

looney — Tue, 02 Aug 2011 05:08:31 GMT

Hello All,

Thank you for the replies.

In response to "Rich D"...I've only used Trend Micro just once quite aways back, was curious and looked in registry and did notice entries, but left them alone.

Fred

Re: Is My NIS 2011 actually working?

looney — Tue, 02 Aug 2011 05:55:12 GMT

Hello Mr Dick Evans,

Thanks for reply....I'm only going to use the 3 extra "free" on demand scanners I listed, only because of what I read elsewhere. The Norton DNS I was totally unaware of, I think I'll try it out, reckon' it can't hurt, being You use it.

As for software program companies trying to get my money, nah. I just use the free versions. I'll just let Norton milk me...just kidding.

Fred

Re: Is My NIS 2011 actually working?

RichD — Tue, 02 Aug 2011 05:32:00 GMT

Hi looney,

To remove the Trend Micro installation, you could try their removal tool. Here's the link to the instructions (thanks to huwyngr)

http://esupport.trendmicro.com/Pages/How-do-I-remove-old-or-new-versions-of-Trend-Micro-products-in-my-comp.aspx

RichD

_________

Re: Is My NIS 2011 actually working?

looney — Tue, 02 Aug 2011 05:56:55 GMT

Hello SendOfJive,

I pretty much browse web with Internet Security Zone set to HIgh. Only use default setting when necessary...forum and email login, or a couple video sites. I notice Norton updates automatically, as does Windows, the others I do manually. I normally do update checks every 3-5 days.

Being I only have 3 other "on demand scanners", which I've read come recommended, I'll just stick with those

Thanks

Fred

Re: Is My NIS 2011 actually working?

looney — Tue, 02 Aug 2011 05:58:07 GMT

Hello Bombastus,

Thanks for reply. I tried link, and Norton stopped access with the Malicious Web Page blocked screen. I actually think I've used link before, not sure. So I reckon Norton is alive and well.

Thanks

Fred

Re: Is My NIS 2011 actually working?

looney — Tue, 02 Aug 2011 05:51:25 GMT

Wow, guess I'm not the only one awake, joking.

Went to link and read, but it doesn't apply to the one-time AV scanner "HouseCall". I didn't actually download one of their programs as mentioned in link provided.

Thank again for reply

Fred

Re: Is My NIS 2011 actually working?

AdvancedSetup — Tue, 02 Aug 2011 06:35:05 GMT

You're certainly welcome to use the free Malwarebytes' Anti-Malware product as a secondary scanner and there should not be any issue. However preventing the system from becoming infected in the first place is the main goal of any of these type of products, not cleaning up after the fact. Infections such as Sality once on the system will wreak havoc with your system so prevention is preferred.

Generally I would recommend that you have someone assist you with checking what software is currently on your system and ensure that old software that is known to allow threats to exploit your system are removed and the latest versions installed. Sometimes exploits can enter the system before Anti-Virus or Anti-Malware can detect and stop it so keeping system software and 3rd party software up to date helps to prevent that as best as possible.

Norton Internet Security is a great application and I do recommend its use. Our product is not meant to replace your Anti-Virus it is meant to augment it. Contrary to what I've seen posted quite a few times use of the Pro version of MBAM with Norton Internet Security works just fine and they do not step on each other and do not miss infections because both are on the system.

In extensive testing with real malware both products find stuff the other product does not and we've not experienced any lock-up from either our product finding and removing the infection or NIS finding and removing the infection.

If you do have NIS 2011 and are using or want to use Malwarebytes' Anti-Malware (aka MBAM) or the Trial, the following exclusions should help prevent any issues running both programs at the same time.

Show Hidden Files and Folders in Windows XP:

Click Start and select My Computer
Click the Tools item from the menu at the top of the window (if you don't see Tools press the Alt key on your keyboard and it will appear)
Select Folder Options
Click the View tab and make sure Show hidden files and folders is selected under Hidden files and folders
Next, uncheck the box next to Hide protected operating system files (Recommended)
Then, uncheck the box next to Hide extensions for known filetypes
Click Apply then click OK

Show Hidden Files and Folders in Windows Vista and Windows 7:

Click on the Startbutton and select Computer
Press the Alt key on your keyboard and click on Tools
Select Folder Options
Click the View tab and make sure that Show hidden files and folders is selected under Hidden files and folders
Next, uncheck the box next to Hide protected operating system files (Recommended)
Then, uncheck the box next to Hide extensions for known filetypes
Click Apply then click OK

Set Exclusions for Malwarebytes' Anti-Malware in Norton Internet Security 2011:

   1. Open Norton Internet Security and click on Settings at the top
   2. Click on Computer Settings
   3. Click Configure [+] to the right of Items to Exclude from Auto-Protect and SONAR
   4. Click Add
   5. Make sure that Include subfolders is checked in the small Add Item window
   6. Click the small folder icon to the right of the blank white space
   7. In the Browse for Folder window that opens, navigate to C:\Program Files
   8. Click once on Malwarebytes' Anti-Malware to highlight it and click on OK
   9. Click OK and verify that in the box under The following items are ignored by both Auto-Protect and SONAR: it says C:\Program Files\Malwarebytes' Anti-Malware
10. Repeat steps 4-9 for the following files and folders:

C:\Documents and Settings\All Users\Application Data\Malwarebytes
Note: On Vista and 7 this will be C:\ProgramData\Malwarebytes
C:\Windows\System32\drivers\mbam.sys
C:\Windows\System32\drivers\mbamswissarmy.sys

11. Once you have all of those items in your list, click on Apply then click on OK to close that window and then click Apply and OK to close the Settings window
12. Close the Norton Internet Security window

Set Exclusions for Malwarebytes' Anti-Malware in Norton Internet Security 2011 on 64 bit Windows Versions:

   1. Open Norton Internet Security and click on Settings at the top
   2. Click on Computer Settings
   3. Click Configure [+] to the right of Items to Exclude from Auto-Protect and SONAR
   4. Click Add
   5. Make sure that Include subfolders is checked in the small Add Item window
   6. Click the small folder icon to the right of the blank white space
   7. In the Browse for Folder window that opens, navigate to C:\Program Files (x86)
   8. Click once on Malwarebytes' Anti-Malware to highlight it and click on OK
   9. Click OK and verify that in the box under The following items are ignored by both Auto-Protect and SONAR: it says C:\Program Files (x86)\Malwarebytes' Anti-Malware
10. Repeat steps 4-9 for the following files and folders:

C:\Documents and Settings\All Users\Application Data\Malwarebytes
Note: On Vista and 7 this will be C:\ProgramData\Malwarebytes
C:\Windows\System32\drivers\mbam.sys
C:\Windows\SysWOW64\drivers\mbamswissarmy.sys

Click Start and select My Computer
Click the Tools item from the menu at the top of the window (if you don't see Tools press the Alt key on your keyboard and it will appear)
Select Folder Options
Click the View tab and make sure Do not show hidden files and folders is selected under Hidden files and folders
Next, check the box next to Hide protected operating system files (Recommended)
Then, check the box next to Hide extensions for known filetypes
Click Apply then click OK

Reset Hidden Files and Folders in Windows Vista and Windows 7:

Click on the Start button and select Computer
Press the Alt key on your keyboard and click on Tools
Select Folder Options
Click the View tab and make sure that Do not show hidden files and folders is selected under Hidden files and folders
Next, check the box next to Hide protected operating system files (Recommended)
Then, check the box next to Hide extensions for known filetypes
Click Apply then click OK

Set Exclusions for Norton Internet Security in Malwarebytes' Anti-Malware:

Open Malwarebytes' Anti-Malware and click on the Ignore List tab
Click the Add button on the lower left
In the small browse window that opens, navigate to C:\Program Files and click once on Norton Internet Security and click OK
Close Malwarebytes' Anti-Malware

If you have any questions about the product or settings please visit the Malwarbytes' site and I'm sure someone can answer your questions for you.

Re: Is My NIS 2011 actually working?

AllenM — Tue, 02 Aug 2011 13:53:58 GMT

While it is well thought out to add exclusions for both products so that they don't alert on each other I am more concerned about other infections which both products could catch and attempt to remediate. This is where contention can be caused between the two products.

It is great that you have tested the two together and I will trust that no problems were seen during such tests but that does not mean there won't be problems at some point - the risk is still there since they both have real-time protection. To do this with assurance that there would not be any conflicts would necessitate that both products be designed from the ground up so to speak to operate cooperatively with each other.

I would not recommend running two products concurrently which has real-time protection.

Best wishes.

Allen

Re: Is My NIS 2011 actually working?

AdvancedSetup — Tue, 02 Aug 2011 16:05:59 GMT

If you have actually seen this happen or can reproduce it please post the results or steps to reproduce it as in multiple tests with live real malware we've not been able to reproduce any contention.