Norton Internet Security / Norton AntiVirus

[k250]

I've tried to run Norton Power Eraser twice; (scan and rootkit). Each time I get the error message "scan cannot run because Norton Power eraser cannot access the Symantec service" and advice to check my connection. My internet connection has shown as been good on both occasions. The error code I receive is 0x80045003.

I'm running the scan as I've had several fake antivirus webpage requests (blocked by Norton) and an internal programme error (error code 0x80004005) on two occasions (each time followed by unauthorised access (blocked by Norton) from services.exe. targetting Norton internet security. I've had high cpu usage on several occasions from iexplore.exe causing slow internet usage.  I've run a full Norton scan and a full scan from malwarebytes - both have only shown tracking cookies.

I'm running Norton internet security 2011. I have Windows 7, service pack 1. 

[BanMidou]

Hi Welcome to Norton community!

Well the unauthorized access blocked is common.

It happens when processes get to close to Norton Processes.

run>msconfig>startup

lookout for suspicious entries

are you able to visit all antivirus vendor sites??

As For Norton Power eraser goes even I was not able to run the application the whole day tunrs out soemthing may be wrong with server but  It did work in night though

Don`t be too worried about not able to run power eraser chances are your getting the message because the symantec server is down

Even norton account is  not accessable temporarily !

Give NPE one more try!  after a while

Please do be careful regarding what you remove using NPE its an aggressive tool does have false positives!

As for the fake web page requests goes please could you provide more details

[k250]

Hi, thanks for your reply. I’ll try Norton later, as suggested. I haven’t had any problems accessing antivirus vendors so far.

I ran msconfig, I didn’t see anything suspicious in there but have pretty basic knowledge so would perhaps need to double check online what is legitimate at start up and what isn’t..

The intrusion attempts that were blocked were an ‘HTTP fake AV webpage request 1’ and ‘HTTP blackhole toolkit activity (this was formerly listed as http malicious toolkit variant activity 22 but has since changed name in norton history)’, both at the same time. On both the ‘attacking computer’ IP and source address are listed as my IP address. A day later I had ‘HTTP fake antivirus webpage request 2’ blocked, this time the IP address of the ‘attacking computer’ is different, the destination address is my IP.

Around this time, when using internet explorer, several new windows opened and disappeared quickly whilst I was online. Looking in the internet history there were several webpages I hadn’t visited. I’ve not had any high level security alerts since but am worried due to my laptop being listed as the attacking computer and the random internet explorer activity - hence me trying to use norton power eraser!

[BanMidou]

Hi again

Well the attack in which your IP address was listed is not exactly you attacking yourself

You might have visited a compromised website which had a bad script which resulted in the drive by download/attack

the attack actually came from your browser as you were viewing the bad site using it !

not really bad news  

But 

the second one well can`t say may be you may have a hidden threat  which sent the request to attack ! 

Please do wait for other members

Please don`t use the computer to enter bank/Important site!

Do give Power eraser a  try but don`t remove the threats (can sometimes make situation worse)

[k250]

Hello, many thanks for your reply. I was able to run Norton Power Eraser just now (including rootkit scan) and no threats were found. Just slightly concerned about the possibility of a hidden threat so any other advice or suggestions would be very much appreciated...

[BanMidou · Accepted solution]

nope looks like those were attacks that came whilst visiting a bad site 

And norton has blocked the drive by download/attack!

but if you do get any inrustion attempt message by norton Frequently then their is a problem

i.e after a few minutes 

If your search results get redirected

If your PC freezes  periodically

If their is a net slow down

unnecessary pop ups

toolbars on your browser which come from nowehre

(installed without knowledge)

firewall logs showing something strange 

These all could hint the presence of a threat!

Norton Power is aggressive but as all products is not 100%

don`t use as a second opinion scanner

Malware bytes is sufficient!

Install all important windows updates 

Update java and other drivers / software to latest to prevent any infections!

If you have not recieved any inrusion message other than the 2 before then your system is clean!

If you want you can wait up for other memebers opinions!!

[k250]

Thanks for your advice Midou, hopefully there won't be further probs / dodgy drive by attacks!

[gemjunkie]

I tried to run power eraser and it stopped the scan stating a catastrophic failure error code was 0.8000ffff.n5

any ideas why? thx

---

k250 wrote:

I've tried to run Norton Power Eraser twice; (scan and rootkit). Each time I get the error message "scan cannot run because Norton Power eraser cannot access the Symantec service" and advice to check my connection. My internet connection has shown as been good on both occasions. The error code I receive is 0x80045003.

I'm running the scan as I've had several fake antivirus webpage requests (blocked by Norton) and an internal programme error (error code 0x80004005) on two occasions (each time followed by unauthorised access (blocked by Norton) from services.exe. targetting Norton internet security. I've had high cpu usage on several occasions from iexplore.exe causing slow internet usage.  I've run a full Norton scan and a full scan from malwarebytes - both have only shown tracking cookies.

I'm running Norton internet security 2011. I have Windows 7, service pack 1. 

---

---

k250 wrote:

I've tried to run Norton Power Eraser twice; (scan and rootkit). Each time I get the error message "scan cannot run because Norton Power eraser cannot access the Symantec service" and advice to check my connection. My internet connection has shown as been good on both occasions. The error code I receive is 0x80045003.

I'm running the scan as I've had several fake antivirus webpage requests (blocked by Norton) and an internal programme error (error code 0x80004005) on two occasions (each time followed by unauthorised access (blocked by Norton) from services.exe. targetting Norton internet security. I've had high cpu usage on several occasions from iexplore.exe causing slow internet usage.  I've run a full Norton scan and a full scan from malwarebytes - both have only shown tracking cookies.

I'm running Norton internet security 2011. I have Windows 7, service pack 1. 

---

[BanMidou]

Hi

You should create a new topic 

Why are you running Power Eraser??

Any threats detectd ?  Which Norton Prduct do you have installed?

[GORPY1 Super Spam Squasher]

Is Norton Power Eraser, Malwarebytes or any other malware search really effective UNLESS you "Turn Off" System Restore First,.how does anyone know what may be hidden in System Volume or I should say"System Restore" at least in XP, Thanks, Gorpy1