10-16-2011 01:51 AM - edited 10-16-2011 01:58 AM
In PC security I'm prompted to run a live update as my virus and spyware definitions are not up to date. However when I run the live update I get failed to complete messages on:
Norton 2011 Iron Whitelist
White List
Status: Failed to complete
and
Norton 2011 Virus Definitions
Norton AntiVirus Definitions
Status: Failed to complete
When I click to Tech Support a screen loads with - An Error has occurred with Norton 360; Error: 8920, 204
Can I can get some help on this?
Cheers
10-16-2011 05:21 AM - edited 10-16-2011 05:26 AM
Hi Mille,
If the LU failed just by saying the reason that Virus and spyware definitions failed to complete, could please check the data and time setting of your PC and make sure that its the current date and time?
This might look as a simple thing but this matters for the definitions to be updated.
If that doesn't work please try the below:
1. Download the full update package from here:http://www.symantec.com/business/security_response
- yyyymmdd-ver-v5i32.exe for 32-bit machines
- yyyymmdd-ver-v5i64.exe for 64-bit machines
2. Install the downloaded package
3. Run Live Update manually
Please use the download manager when you are downloading the updates manually. You can try one from here :
http://www.speedbit.com/downloads/ incase if you are not using any.
Try this and let us know the results.
Regards,
Prasanna
10-16-2011 12:50 PM
10-16-2011 02:01 PM
It certainly looks suspicious, doesn't it?
I'm starting to wonder if maybe you picked up some malware. You might download and run the free version of malwarebytes, as a crosscheck....
10-17-2011 10:47 AM - edited 10-17-2011 10:52 AM
10-17-2011 11:06 AM - edited 10-17-2011 11:08 AM
OK, that is very suspicious indeed. It's actually a signature of a particularly nasty variety of malware, a rootkit, which subverts your Operating System and/or security software to prevent its malware payload (a virus or trojan) from being uninstalled--as I understand it: I am not a malware expert. These nasties will also typically prevent you from accessing or running security software from the reputable vendors (like Norton, AVG, and malwarebytes) and require highly specialized methods and tools for their safe removal.
I wouldn't try to tamper with this further without expert guidance, as a particular rootkit we've been seeing lately--called zeroaccess--can contain a tripwire that will shut your system down if your scans do happen to find it.
I'm going to page Quads, our resident anti-malware Ace. Yesterday, I accidentally stepped on his feet a bit after he responded to such a page (it is very dangerous to have multiple people giving you advice at once when facing one of these things) so hopefully he isn't ignoring me for endangering the user! Once he engages, you won't hear from me again until he gives the all-clear; this is for your safety, as noted above.
In the event that you need to proceedbefore he engages, we have several other forums that we can recommend, where a real malware expert can work with you one-on-one in real time to dig these things out. Some of our best folks here have checked them out to make sure that they are capable, and competent to deal with rootkits and other nasties. Most of them handle tricky Windows problems as well.
Just sign up for one of their free accounts--where required--and go to the forums; don't click on any of the ads! Again, note that some of these forums (like bleepingcomputer) require that once they begin working with you, you not consult any other sources on your infection until it's resolved--and will close your case if you do. This is important, to avoid confusion (and really bad outcomes) resulting from trying to follow several people's advice at once! LOL
Good luck, and please let us know how it turns out!
10-17-2011 11:51 AM
10-17-2011 12:01 PM
You're welcome; that's what we're here for. ![]()
And don't worry--whether its Quads or one of the other forums, there are helpful souls out there with both the talent and the dedication to work with you to dig these nasties out. Quads, for example, maintains a machine that he will deliberately infect with this stuff until he thoroughly understands it, its vulnerabilities, and how to defeat it without harming the host system.
You will be helped!
Quads is in another time zone...but that means he can be up figuring this stuff out while the rest of us are catching some Z's for the coming day! Hang in there.
10-17-2011 12:27 PM
10-18-2011 01:42 AM
Moved to own thread for better exposure.
