Norton Internet Security / Norton AntiVirus

[JonP]

Have got this issue on both a Vista and XP machine and sounds very much like the following problem

http://community.norton.com/norton/board/message?board.id=nis_feedback&thread.id=9293&view=by_date_a...

Basically even though I know for a fact that there are updates to receive live update reports "no updates found" then continues to tell me my definitions are out of date.  If I download the latest definitions (Manually) it all works.  But this is something I dont want to be doing.

I have used the removal tool and re-installed with reboots as per the above posts.  No effect.     

Have also used the one click with a chap who logged on remotely to the Vista Laptop.

He stopped all un-needed services and left symantec running after a reboot NIS2009 successfully picked up an update.  Now that the other services are running again  its all ticking over nicely...   I dont understand how this could of worked and the same thing has not worked on the XP machine.   Any one got any ideas?

[Tech0utsider · Accepted solution]

---

JonP wrote:

Have got this issue on both a Vista and XP machine and sounds very much like the following problem

http://community.norton.com/norton/board/message?board.id=nis_feedback&thread.id=9293&view=by_date_a...

Basically even though I know for a fact that there are updates to receive live update reports "no updates found" then continues to tell me my definitions are out of date.  If I download the latest definitions (Manually) it all works.  But this is something I dont want to be doing.

I have used the removal tool and re-installed with reboots as per the above posts.  No effect.     

Have also used the one click with a chap who logged on remotely to the Vista Laptop.

He stopped all un-needed services and left symantec running after a reboot NIS2009 successfully picked up an update.  Now that the other services are running again  its all ticking over nicely...   I dont understand how this could of worked and the same thing has not worked on the XP machine.   Any one got any ideas?

---

I believe that Symantec is working on a fix. For now, you need to manually update definitions. I wouldn't really update them more than once a week because it is tedious (somewhat) and you have sufficent protection. 

[JonP]

Thanks for that its good to know hopefully it will not take too long.  Also guess what the issue has now returned on the vista machine.

Its strange got a good 24 hours out of vista before the problem came back (and that includes serveral reboots) makes me happy in a way as nothing that the support tech orginally did should have fixed the issue in the first place but still.....drat!.

Decision time continue on with the manual updates OR back to NIS 2008...... 

[jamok]

Hi JonP,

 I wrote the thread which you posted the link and I've been tinkering with my system so much that now it seems to be working fine.

 One solution i tried using was i turned off "check for server certificate revocation" in IE. I'm not sure how relevant it is to our problems but my NIS 2009 is now updating like clockwork. And when it is not updating like it should, a gentle manual Liveupdate will get it kicking hehehe .....

 So, to turn this option off, you go to : IE -> Tools -> Internet Options -> Advanced -> Scroll down to Security and uncheck "check for server certificate revocation (requires restart)".

 After you've unchecked it, reboot your PC and once connected to the Internet, click on "Run Liveupdate" in the NIS 2009 console.

 It worked for me so i hope it will work for you too bro ....

 All the best :-)

[mijcar]

Another thing.  What other Symantec products did/do you have on your machine.  NIS2009 is unique in that it uses its only Live Update.  I'm wondering if there is some other Live Update present that is being improperly invoked by NIS or alternatively something about the method of installation crossed some links so the two different versions of Live Update are batting heads or there are some artifacts of the other Live Update that keep this one from working.

How did you install the product?  Self-install?  Uninstall of the original, then install?  Norton Removal Tool?  I am beginning to think that the NRT might create more problems than it solves - it doesn't actually remove all traces of Norton products and it might leave some dangerous artifacts - some of the artifacts might be databases looked for by current installations to check out various states, and if found might result in conflicting data for the running program.

If someone runs NRT and that doesn't sound the problem, I'd recommend to a deep search (hidden and system files) of my computer and deleting any folder containing a Norton or Symantec reference in its name and then most files with Norton or Symantec in its name.  Just don't permanently delete them.  I am not completely happy with this suggestion; but it seems the closest thing to clearing out all artifacts.  Unless you really know what you're doing, I do not recommend you mess with the registry.

If you follow this procedure, it will probably be advisable to make sure you have your activation key(s) available first.

[JonP]

Tried the change to IE on Vista (didnt restart computer) just tried a live update and it works.  Will see whether the fix stays this time on Vista and will try on XP tonight and let everyone know.  Fingers crossed.  

PS anyone one know what it is I have actually turned off? :) 

[jamok]

Hi JonP,

 Keep us updated if this little trick worked.

 Also, this is what i found out about what we turned off :

Internet Explorer 6 includes support for server certificate revocation, which verifies that an issuing CA has not revoked a server certificate. This feature checks for CryptoAPI revocation when certificate extensions are present. If the URL for the revocation information is unresponsive, Internet Explorer cancels the connection.

 Cheers !

[JonP]

Tried to live update the XP Machine "No Updates found" changed the IE setting and 32 meg later definitions are up to date.   Left both for 40 minutes or so and.......  XP machine says it updated 1 minute ago..  Vista...48 seconds ago...woo hoo looks like we are on to a winner.

Will leave them both running and update later, thanx for all the help.

[JonP]

Latest update.  Both the XP and Vista machine ran like clockwork all of last night updating with pulses of their own accord.  However this morning (havent touched XP) the vista machine is running as Jamok advised where the pulse updates dont kick in until at least one (sometimes two) manual live updates are done.

One thing I have noticed is that the message in the window says "updated 1 hour ago" however if you open the window to see the exact time it shows the last time a live update was run..   So although its definitely better than manual updates and I have had no side effects from the tweak.  Its still not quite doing what it said on the tin...

[jamok]

Hello JonP,

 I also have the problem when i leave my laptop on overnight and in the morning, i will see my definition updates is over 1 or 2 hours ago.

 I've found out that when the virus definitions changes versions during the night, my NIS is not able to digest that change and therefore, will remain with the previous version instead of the updated one. A quick manual LiveUpdate should be able to solve it.

 To check for the latest virus definitions, go to :

  http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=n95

 It should match the folder name in :

 C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs

 Heard that Symantec will be releasing a fix for this soon but in the meantime, so far this trick has been working for me. It's definitely better than downloading a 28MB virus definition update file :-)

 Cheers !