Welcome to the Norton Forums! Scan the threads for topics of interest or create your own. For fastest results, use our search feature to find related conversations. Symantec employees also post here when they can. So don't be shy -- join the discussions!
02-15-2014 07:19 PM
Recently I have been hearing about people getting cold called about a virus or some kind of problem on the computer. Then they take control of the computer through remote access and install various programs.
If this happens to someone is there a way for you to completely terminate the program that they may have installed?
Would Norton 360 detect and remove the program? If not would Norton Power Eraser remove the program?
Could this kind of remote access and various programs do damage to the network? For example: If there are 2 computers directly plugged in through one router could this damage the second computer?
Would Norton 360 and Norton Power Eraser safe mode with networking scans remove the programs?
I wanted to get a better understanding about these cold calling issues. Any feedback will be greatly appreciated!
02-15-2014 06:45 PM
N360 Quick scan fails with error 3038, 104 and finds no autofix solution and takes me to the manual fix:
Operating System: Windows 8, Windows 7, Windows Vista, Windows XP
Last modified: 02/05/2014
So I do as recommended and it works fine for a while; then, usually within 48 hours of rebooting to complete the fix, the same failure and error occurs. This is unsatisfactory because until I fix it manually, any virus scans I try all fail, leading me to believe that my PC is vulnerable to compromise until I discover the failure and fix it again. Since I get no indication of a failure until a scan runs & fails and I check task status or security history, I feel my computer is unprotected. Even worse, I can't tell if email is being scanned properly, so I view it as a totally unsatisfactory condition.
This is getting tedious, having to baby sit a program that is supposed to be almost autonomous.
I believe it is Norton's responsibility to come up with a patch to fix this issue.
02-15-2014 05:41 PM
I have a question/problem I need help with. I got home after being gone all day and sat at my desk just in time to watch it reboot twice without me doing a thing. Since this has been happening off and on for a few days (though not like it did just now) I opened Norton to scan and make sure I don't have a virus, after first running update to make sure I was up to date.
I checked the Security History to see if there might be something there and found this:
Category: Firewall - Activities
Date & Time,Risk,Activity,Status,Recommended Action,Category
2/15/2014 6:04:28 PM,Info,"Rule \"Default Block SSDP\" blocked (192.168.0.1, Port (2869) ). Inbound TCP connection. ",Detected,No Action Required,Firewall - Activities
Rule "Default Block SSDP" blocked (192.168.0.1, Port (2869) ).
Inbound TCP connection.
Local address, service is (BETH-7E26D6569E (192.168.0.6), Port (2869) ).
Remote address, service is (192.168.0.1, Port (1281) ).
Process name is "C:\WINDOWS\system32\svchost.exe".
Category: Norton Product Tamper Protection
Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction
2/15/2014 5:58:04 PM,Medium,Unauthorized access blocked (Send Terminate Message to Window),Blocked,No Action Required,2/15/2014 5:58:04 PM,C:\WINDOWS\EXPLORER.EXE,1880,C:\Program Files\Norton 360\Engine\220.127.116.11\ccSvcHst.exe,2484,Send Terminate Message to Window,Unauthorized access blocked
Category: Norton Product Tamper Protection
Date & Time,Risk,Activity,Status,Recommended Action,Date,Actor,Actor PID,Target,Target PID,Action,Reaction
2/15/2014 5:56:37 PM,Medium,Unauthorized access blocked (Duplicate Object),Blocked,No Action Required,2/15/2014 5:56:37 PM,C:\WINDOWS\SYSTEM32\SERVICES.EXE,816,C:\Program Files\Norton 360\Engine\18.104.22.168\ccSvcHst.exe,2484,Duplicate Object,Unauthorized access blocked
The time corresponds with my reboot. There's more if it's needed. Not sure what is needed to figure this out. I understand that Norton is working and protecting me... what I don't understand is why my pc reboots when this happens.
Any help would be appreciated
02-15-2014 09:52 AM
In Firefox I'm setting: "Show my windows and tabs from last time" in the options but every time I close and re-open the browser I only get my preferred Home Page and find that the options have been changed back to "Show my Home Page".
In searching for suggestions with this, I have been told that it could be due to Norton's Privacy Cleanup option but the instructions only apply to 360 (I have INternet Security) and I cannot even open the Settings nor find a Men listing to enable me to set my Norton up for this, assuming that is the problem?
02-15-2014 08:07 AM
Maybe it is something obvious that I am missing but I just reinstalled Norton 360 on my main desktop and I don't see a way to add it to my devices. It used to be that you could do it through Norton 360 itself but now it takes you to the Norton Management website and seems to want you to download and install through that process. Why make the process more difficult? I don't want to have to reinstall again, how do I add my device to Norton Management with an existing install of Norton 360???
Again I may be missing something obvious :)
02-15-2014 08:04 AM - edited 02-15-2014 08:07 AM
Re: the post by Wimuggs "Norton 360 Backup Space" - marked 'Resolved'
I have a similar problem.
Over the years, (12), my PC has changed and I have moved from XP to MS-7, hard drives have come and gone, systems crashed and information could have been lost without being aware of it.
Hopefully, it is all there in Norton 360 Backup just waiting to be retrieved (if it can be found).
That is the faith I have in Norton and I just keep backingup (incremental I believe) every week.
Well, as mentioned in Wimuggs post, the problem of space must eventually be confronted and the only suggested solution is seemingly to delete some files.
Here are some of my Norton backup files according to Windows ...
... not too helpful really as sizes of the files are not shown.
... here are the sizes according to "TreeSize" ...
My question is, what can be deleted without losing well guarded information?
02-15-2014 05:59 AM - edited 02-15-2014 06:13 AM
TuneUp has a "!" and then when I execute it, it was generate an error on C: after Windows said it's already 100% optimized, which is true. All relevant screen shot are attached.
Below is the less that useful support chat I had.
8:06 AM Checking configuration...
8:06 AM Connecting...
8:06 AM Connected. A support representative will be with you shortly.
8:07 AM Support session established with Vamsi Krishna.
8:08 AM Vamsi Krishna restarting application as Windows system service
8:09 AM Checking configuration...
8:09 AM Connecting...
8:09 AM Connected. A support representative will be with you shortly.
8:09 AM Application running as Windows system service
8:09 AM Support session established with Vamsi Krishna.
8:09 AM Sebastien Tardif: everything you need to know is showing up on the screen
8:09 AM You have granted full permission to Vamsi Krishna. To revoke, click the red X on the toolbar or press Pause/Break on the keyboard.
8:09 AM Remote Control started by Vamsi Krishna.
8:09 AM Vamsi Krishna: You will now see a prompt to accept the connection. Please click on “Yes”. It may take a few minutes for me to connect.
8:10 AM Vamsi Krishna: I'm now connected to your computer.
8:10 AM Vamsi Krishna: Please give me a minute, I will check with the issue.
8:10 AM Sebastien Tardif: c drive is a ssd drive, the only optimization available is TRIM not defragmentation
8:11 AM Sebastien Tardif: if you don't know what ssd and trim are you need to escalate the issue
8:12 AM Vamsi Krishna: This message appears when you have a virtual drive created by programs like Live Drive. Norton Security Suite optimize all other drives, but skips the virtual drive. You can ignore this message if you have a virtual drive installed.
8:12 AM Sebastien Tardif: your premade message is wrong, I don't have a live drive or virtual drive.
8:13 AM Sebastien Tardif: I have ssd drive. Your software doesn't handle correctly ssd.
8:13 AM Sebastien Tardif: Sdd is very popular drive, all mac come with ssd now, but not all the pc.
8:14 AM Sebastien Tardif: goodle ssd and trim, then you can open a bug against your software
8:16 AM Vamsi Krishna: Let me explain you in detail. ssd drive is a solid state drive. Windows Operating System do not defragment that Drive.
8:16 AM Sebastien Tardif: windows is able to do the trimming on c without any issue. Your software just need to delegate to windows.
8:16 AM Sebastien Tardif: Your software doesn't seem to know that, it tell me "!" that I have to do something. That's the bug I'm talking aobut.
8:17 AM Sebastien Tardif: Your software suck, it just need to call windows, and windows will do the right thing like you just saw on my screen.
8:17 AM Sebastien Tardif: it's a newbie bug, maybe an intern coded that part.
8:18 AM Sebastien Tardif: Please confirm the bug and give me a bug ticket.
8:18 AM Vamsi Krishna: Please make a note of your case reference number. 14085179
8:20 AM Vamsi Krishna: Sebastien, as of now we can see that Disk Defragmentation Services is not there in Windows.
8:21 AM Sebastien Tardif: You saw on the screen that windows handle all fine all defragmentation and optimization task for all drives.
8:21 AM Vamsi Krishna: We need to make sure that Disk Defragmentation service is set to run Automatic
8:22 AM Vamsi Krishna: Disk Defragmentation service is not listing in the Services of Windows
8:22 AM Sebastien Tardif: "we need" if that work it's a workaround, I didn't change the setting after installing norton security suite
8:23 AM Sebastien Tardif: the service seem to not be needed for windows itself.
8:23 AM Vamsi Krishna: Disk Defragmentation service is by default comes with the windows Operating System.
8:24 AM Sebastien Tardif: my system is now set to automatically optimize ssd and defrag.
8:24 AM Vamsi Krishna: Okay, Can you see the Disk Defragmentation service in Windows?
8:25 AM Sebastien Tardif: this is microsoft windows 8.1, and it works perfectly fine, and able to do everything about optimization and defragementation without that service.
8:25 AM Sebastien Tardif: Maybe Norton Security Suite doesn't support Microsoft Windows 8.1? Just older version?
8:25 AM Vamsi Krishna: Norton Security Suite is compatible with Windows 8.1
8:25 AM Sebastien Tardif: The problem I have is that Norton Security Suite is lost.
8:26 AM Sebastien Tardif: It show be wrong status about tuneup, and is confused about drive c, which is ssd drive.
8:26 AM Sebastien Tardif: You see on my screen that microsoft windows is not confused at all and everything work fine.
8:27 AM Sebastien Tardif: Are you giving up? It seems that regonizing a bug in your software is not one of your option.
8:28 AM Sebastien Tardif: my computer is not special at all.
8:28 AM Sebastien Tardif: and it's all default configuration
8:28 AM Vamsi Krishna: Diskfragmentation in Windows operating system causes significant performance degradation. Your PC takes a considerable amount of time in gathering the pieces of a file if the file is fragmented across the hard drive.
8:28 AM Sebastien Tardif: are you joking why are you pasting this to the chat?
8:29 AM Sebastien Tardif: Please escalate this issue right now. I cannot handle this anymore.
8:29 AM Vamsi Krishna: Okay. Please give me a minute
8:29 AM Sebastien Tardif: I want a different support person right away.
8:30 AM Transferring session to another technician...
8:30 AM Remote Control by Vamsi Krishna stopped.
02-14-2014 10:12 PM
Don't know where I should be posting this as I am new to the community & feeling my way around. Until recently I was Norton Basic Anti-sparer user for 12 yrs. I'd run live updates & quick scans daily, then use PC. Tools Register Mechanic to get the best performance as rated by the meter.
Now being a 360 user how often should I be running tasks & tune-ups? Should I just go with "You PC. Is safe for everyday computing" and leave it at that? Or should I be running some tune-up tools daily, weekly, or how often?
02-14-2014 10:10 PM
Today I got a pop up for Norton 360 Renewel. This is usually something I click exit on but today I stopped and noticed something. From what it seemed, the image on the window looked like it was fake. It had a watermark on it.
So is this a lazy norton employee? Or a sloppy Hacker?
Link to the images:
02-14-2014 04:38 PM
I recently updated my Norton. The first few days both skype and internet seemed to run very slow and would disconnect every 3-5 mins. Now I can't get on either one to stay connected for more than 30sec without being kicked off. I know its not my connection to my wifi because it has all bars full and both skype and the internet work fine on other devices in the house.
02-14-2014 03:12 PM
Continuing to try to update my Norton account on my desktop, and having difficulty in accessing the symantec server. Whatever I click on in Management, it takes me to a page I haven't seen before in IE which purports to be a Norton safe site called 'browsersafeguard' but up comes a message 'no such host known'. I unticked proxy server thinking that might be hindering things and the next time it took me to the 'browsersafeguard' page up came the warning 'WELL KNOWN PHISHING SITE' !!!
Any ideas how I can access the Symantec server in order to update my new Norton account and get rid of this phishing site?
02-14-2014 10:14 AM - edited 02-14-2014 10:21 AM
I have no clue what this is. It just came up while I was running registry clean up. The autofix said it was complete and installation/repair was successful.
Anyone know? My Norton 360 seems to be functioning normally.
02-14-2014 02:00 AM - last edited on 02-14-2014 02:47 AM by Gayathri_R
February 14, 2014
Some comments about Symantec remotely shutting down Customer protection programs.
1. We have used Norton 360 or Internet Security on and off for many years. If someone did not immediately renew they still had full use of the program, just not the live update feature which then became available when renewed. This made sense and was fine with Customers.
2. I find it incredible that you NOW disable the entire program and leave the Customer with no protection or Utilities at all when they do not renew right away.
Normally if a Customer has not renewed the live update feature will not work and the rest of the program should function. But on those computers with Internet connection you seem to send a code which disables the entire program so the customer now has no protection or utilities.
3. On our computers with NO internet connection the Norton 360 etc. continues to work fine , but on those with Internet connection you shut down the entire program not just the live update. What an abuse to the customer!!
4. How can the customer continue to use the program minus the update until they are ready to renew? What is the legal authority to disable the entire program which the customer paid for, when the Customer does not promptly renew live update? You are not just disabling Live Update you are disabling the entire program.
5. If this is the way you treat your customer then I will terminate all use of Norton products at all locations.
There are plenty of good alternatives.
6. You should also be aware that your India support is still as bad as it historically was. Dump India and get American support.
7. Shutting down the Live Update is proper and normal until customer renews but the entire program!
8. The idea that you deliberately send a code to shut down the entire program shows a mind set that the Customer simply does not matter to you.
As I said on those computers where the update occurred just before expiration and then put into service as “no Internet connectivity computers”, Norton continues to work fine with the last update. But on those that connect to Internet you disable the entire program, not just live update. Extraordinary abuse of customer.
Please advise with name and contact phone. Thanks
02-13-2014 11:28 PM
I have 2013 Norton 360 on our machines, but the other day I saw a copy of it (unused, still in shrinkwrap) on sale. If I buy a brand new copy of 2013 Norton 360, can I use that license to extend my coverage or do I have to buy a 2014 Norton 360 to extend coverage?
02-13-2014 04:29 PM
Hello Norton Community
I was just looking in my Norton Insight and I was going through each one of the things you can choose for example trusted files untrused files e.t.c
Intill I went to highest start up impact and I came across tiworker.exe I Googled it and from what I've seen it is something already on Windows If I wasn't to look onto the Norton Insight then I would of never of noticed this file so I don't think it's a big problem but I would just like someone to reasure me.
But the thing that worries me is that when I click it says 'file not found or information is not available for this file format'
and it also gives me the choice to qurantine the item.
Should I be concerned about this file or is it considered worrysome?
Would just like someone to clear this up.
02-13-2014 01:45 PM
After a problem with the ID Vault having a password preset at installation was denied to exist by Norton Support, I began to wonder if I had a legitimate copy of the Norton Security Suite or if someone had somehow slipped an altered or fabricated version onto the Comcast servers. An application version of the email phishing scam.
Is there a way to verify the legitimacy of the copy on my computer?
I spent hours and hours and hours on the phone, quite litteraly. One time I spent over 2 and a half hours on hold and still no one had answered, then my cell phone battery died, along with my patience.
Digging around I found the Auto Update Package on the Norton Update Center. When I run it, it tells me that I have no Norton products installed on my computer. So, now I'm VERY worried, and every Norton support person I can contact just blows it off. Why doesn't Norton care about potentially fraudulent products?
Out of everyone I've spoken with at Norton, only one person has suggested that the Auto Update Package only detects Norton products with a direct subscription to Norton. If that is the case, shouldn't it say that somewhere? If that is indeed the case, why is that kept secret from the rest of Norton?
A L2 Case Manager called me, and in his attempt to prove my copy is legitimate, he had me click SUPPORT --> Get Support. This, it turns out, runs Norton Auto Fix. (Why doesn't it say what it is or does?) Norton Auto Fix then says it failed to fix 1 item. Here is it's output to Clipboard:
Norton Security Suite
Windows 7 Professional
Norton Autofix Results: 1 item(s)
Installation :: Failed
So, what does that mean?
The L2 Case Manager wants Remote Access to completely uninstall the Norton Security Suite, but he won't explain what is wrong.
There is also another group who claim to be from Norton who immediately and aggressively insist on my granting them Remote Access to fix my computer. What is going on with Norton's insistance on Remote Access?
Does anyone on this forum know what is going on? What any of this means?
Is the Auto Update Package telling the truth? That my copy of NSS is not genuine Norton and I'm being and have been scammed? Or has Norton actually disowned it?
Or is the Auto Update Package NOT telling the truth, and I really have a genuine, as Norton made it (modified for Comcast), piece of software? If this is the case, then why create a panic with such a un-truth? What is the point of doing that?
Am I a victim of an elaberate scam?
Or is Norton's Auto Update Package what is deceptive, and Norton's abyssmal customer support falling all over themselves to gain access to my computer, just making it all seem like it could be a scam?
Thanks in advance for all help,
02-13-2014 01:04 PM
Hi Norton community!
Just a general question that I would like some light shed on!
When I look in my history which I don't really do a lot I always see these Statistical Submissions and Sample Submissions being sent out. I am aware that these are normal because of Norton Community Watch but I'm just wondering why I see the same ones all the time being sent out.
I am also aware that if anything was to be a bad file then it would be removed and you would be told by Norton as soon as it is. But I'm just curoius about this.
Also the Submission I've been getting for a while is
WS.Trojan.H Statistical Submission Exonerated and I get 4 of them in my Comunnity Watch logs when I run full system scans with Norton 360.
I've been getting these for months and know that if anything was to happen it would of happened by now. But I would just like some help with this a reasurrence from someone!
I also did some research and apprently this isn't a bad file but just wondering if these Submissions should be anything considered to be worrysome.
Thanks a lot
02-13-2014 11:17 AM
Just out of curiosity . . . is there a way to look up information about specific tracking cookies that Norton removes from my computer? There's not a problem (that I know of). I'm just curious.
02-13-2014 11:06 AM - edited 02-13-2014 11:07 AM
I'm trying to install an updated version of Core Temp but I can't due to Norton deleting it when its downloaded. Its telling me its a trojan.ADH.2 - I've used core temp for a number of years and never had an issue with it. Is it a false positive? Or is there a risk now?
02-13-2014 04:39 AM
Please excuse if this has been asked before but I'm an old age pensioner and not very good with computers.
My Norton 360 is shortly due for renewal and I've been offered a web renewal from Symantec at £60.
But I can buy a new Norton 360 disk from Amazon UK for just £24!
(The logic behind this escapes me, but no matter...)
I did this last year and had a lot of problems uninstalling the old and installing the new software.
So, is there a way I can just enter the new registration key into the existing 360 installation, please?
Many thanks for any assistance.
02-13-2014 12:50 AM
Initially after restarting my Windows 8.1 computer due to the recent Microsoft update, everything Norton seemed fine. When I went to shut down the computer for the day, hours after I had done the restart, I noticed that the screen went from the blue "Shutting Down" display to all black sooner than usual. I didn't think too much of it at the time.
Now, fastforward to today. I turned on the computer and the Windows 8 welcome screen appeared sooner than usual. Still didn't think too much of it. Shortly after signing in to Windows, I noticed that LiveUpdate occurred automatically (I ususally do the initial LiveUpdate manually to start off the day) 10 minutes after the computer booted. This was unusual since I recall in Settings, I left Automatic Tasks Delay at 20 min. (see Screenshot 1), not 10.
I proceeded to check Scan Results in Security History and discovered that Early Launch Anti-Malware scan hadn't run since the 11th of Feb. How could that be if I had turned the machine off and turned it back on on the 12th and 13th? And the feature is apparently turned "On" in Settings.
Screen Shot 3
Since I didn't run any scans on the 12th, no records are displayed for that date. But I did turn the computer on on the 12th.
Then I delved deeper into this mystery. I checked Intrusion Prevention in Security History and discovered that the last time it was enabled was on the 12th. But I also turned the computer off and back on on the 13th (to test Norton), but there's no record of Intrusion Prevention having been enabled in the latter instance.
So is anybody else seeing this? Did Patch Tuesday cause this?
Just to be clear, except for the computer "restart" mentioned at the beginning of the post, all subsequent "starts" were cold boots.
By the way, how do I insert that "Me too" button into a post?
02-12-2014 07:23 PM
This post has been moved to "Norton Toolbar / Norton Identity Safe" board for better exposure.
02-12-2014 06:24 PM
Recently installed Norton 360 when all requested tasked have been completed review says I-E history was last run 3 days previously. How do I then run it manually? And was was it not included in the quick scan?
02-12-2014 06:19 PM
Starting abuptly on Feb. 6th. One of 4 coputers is generating alets for blocked messages under uncategorized. When I check URLs they appear to be bogus. I also ran several IP address provided throup IP locator and they are not valid. Has the coputer gone crazy?
02-12-2014 05:08 PM
Backup error message "There is a backup problem. Make sure the destination drive or device is connected and then try again." Device is external Seagate hard drive. Computer recognizes the device and showing it under my computer. 237GB free of 465 on harddrive. Back up has worked many times in past. Running Windows 7 home premium on Sony laptop. Restarted everything. Suggestions.
02-12-2014 08:30 AM
Hello there curious what is rundll32.exe? I know that it is normal, but what does it do and why is there one in my SysWOW64 folder as well at the system 32 folder. I know it is supposed to be in the system 32 folder, but there was another one now on my task manager in the SySWOW64 folder. I am just curious if I am alright, and I am just being a little nervous for no reason. My computer does run fine though, but if I can get some help figuring out what this is, because I also don't know what my SysWOW64 folder is as well.
02-12-2014 08:07 AM
Hi, have had Exigo several years no problems, but currently it shuts down saying IME default error, i think its a malware infection key logger, but symantec can't see any problem. I have tried to reinstall the program-still ime error. Please Help