01-08-2012 11:21 PM - last edited on 01-09-2012 12:47 AM by Preetha_G
I need help! I ran Norton Power Eraser on my laptop a few hours ago and it had detected a driver that it found as a threat.
Here is what it was:
Can somebody please tell me what this is? I then was going to have NPE remove the threat but I accidently hit cancel instead of fix. When I re-scanned the laptop it told me that there where no risks found! I then did several system restores and ran another scan but it still stated that there where no risks. Now my laptop does not do what I tell it to do sometimes! One thing is my screensaver, it will not go into the screensaver after the time set.
I am currently using Windows 7 using a 64bit operating system
I think I might be infected!!!!!Please Help!!!!!
01-08-2012 11:57 PM
Welcome to the Norton Community Forum
Can you please give us some more information. What was detectd and what did you do? What symptoms do you have of malware? What did you use before NPE since this is a very powerful tool? Thanks.
Success always occurs in private and failure in full view.
01-09-2012 07:39 AM
I had ran the Norton Power Eraser (Including Rootkit Scan) after a full system scan using Norton 360 Version 5.1 on my laptop. Once this file was detected I had become confused on why a system driver was detected so I tried to find the file. This was a system file so when I clicked on it I was told that by opening a system file it could damage my operating system, I also realised that if I open a file with a virus it will be activated so I pressed cancel to be sure not to open the file. I was then going to let NPE remove the threat but I accidently hit cancel instead of fix and now when I re-scan it tells me that there are no risks found. I then ran several system restores so NPE could detect it again but it does not show up anymore. Even when I try to find the set of drivers they are no longer there.
Around late November NPE removed a threat and everything was taken care of. It is still in the history but this recent threat that was detected yesterday is not in the history.
I became somewhat suspicious after running system restore as my laptop took a little longer than normal to start and my screensaver would not activate after the set time.
The detected file was:
I have been running scans all morning and nothing is showing up.
I just really wanted to know what this was.
01-09-2012 07:56 AM - edited 01-09-2012 07:58 AM
NPE is a tool ONLY to be used when you are under a heavy malware attack that no other tool can remove. It also has a high false positive rate. You can answer your own question by simply Googling it. SMR250.sys belongs to Symantec.
On other words...............What NPE is finding is a false positive.
01-09-2012 07:58 AM
I was under the impression that SMR was "Symantec Maximum Repair" driver ... thus IMHO, it appears to be a false positive - which NPE has a reputation of providing.
I saw a thread concerning the SMR driver in NPE Beta 6 detected as a false positive. It is under investigation.
01-09-2012 08:02 AM
Moral of the story......................."Because Norton Power Eraser uses aggressive methods to detect threats, there is a risk that it can select some legitimate programs for removal. You should use this tool very carefully. "