Norton Internet Security / Norton AntiVirus

[keatkenneth]

All too frequently malicious programs evade the protections in Norton Internet Security. The malicious programs are not picked up on the scans.
Usually these particular malicious files and programs are not picked up on ANY scan from ANY company. So you now have your computer attacked
and no scan is able to handle this problem.

However the Norton VRQ Tool DOES pick up many of these destructive and malicious programs.
The VRQ Tool will pick the attack up even if the various Scans show no problem.

I have been using the VRQ Tool with great success.
The problem starts when the VRQ Tool picks up malicious programs, but the "Full Mode Cleanup" does not
remove it.
In that case it must be removed manually, perhaps from the Registry. There are some malicious programs that require this manual removal.
The problem becomes more complicated when the location of the malicious file is not correctly reported by VRQ.
So now you know you have this malicious file that must be deleted BUT the reported location in VRQ does not seem to be correct.
Some malicious files and programs appear to be able to cause incorrect name and location reporting. So this of course makes it harder
to find and delete the file.

I cannot find any instructions for use of the VRQ tool.

If anyone has a solution to finding the files that VRQ detects as malicious please contact me.

In this particular case the VRQ detects seven or eight files. On full mode cleanup in will remove three but the same four files remain.
It cannot get rid of those four files. More files are created by the malicious file/program and VRQ can control the proliferation but not remove
automatically the souce. SO, how do I locate the source and delete it?????????

While I have Norton Internet Security 2009, Symantec will NOT help with this problem. It appears this attack got by Norton Internet Security.
Symantec wants money for each call for help in using the VRQ tool which can become ridiculous.

Again any ideas how to find these malicious files and does Symantec provide any on line support or documentation for use of the VRQ Tool.
I think it is an excellent tool and it uses a different technology than the regular Norton scans.
I hope someone can help with using the VRQ Tool.
Thank you very much.
Kenneth Ellman

<<Edit: Removed personal email ID and mobile number from the post as per the participation guidelines.>>

Message Edited by TomV on 03-25-2009 09:57 PM

[delphinium Norton Fighter]

Hi KeatKenneth:

Sorry, I have no idea about the VQR tool, but in looking at a screenshot, it seems to do much the same thing as Hijackthis, which has become a very popular tool on this forum for identifying and finding infected files.  If you are interested I will locate a link for it.

[keatkenneth]

From Kenneth Ellman
To Delphinium
Kenny replies

The Norton VRQ Tool can be found at :

Norton.com/vss

This is of course a Symantec product..

I have not found any other tool just like this and it has found malicious files and programs that all other scans fail.
Unfortunately Symantec does not provide documentation for this tool but with continued use proficiency developes like
with anything else.

As you may know there are some excellent hints as to how to approach finding and deleting malicious programs
on the post here on this community as:
How to troubleshoot a suspected Malware infection
by
Administrator Tony_Weiss

But unfortunately it does not appear to discuss the use of the VRQ Tool which would help many, many, people.

Anyone familiar with an approach to solving my problem as described above would be greatly appreciated.


When I call Norton Technical Support with questions about use of the VRQ Tool they say very little or just hang up.
Any links you can provide for useful information or programs is appreciated. Thank you very much .
Kenneth Ellman

[delphinium Norton Fighter]

Hijackthis is a free utility that can be found here:http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

Use the third choice on the list. The page provides a quick start guide and Faq.

You can see what kind of a log it generates in this thread: http://community.norton.com/norton/board/message?board.id=nis_feedback&thread.id=42683

There is a rather interesting utility where you can copy and paste the Hijackthis log to be analized.  We have Quads and Yogesh Mohan on the forum to have a look at the log but if you are looking for something more immediate, it's quite informative.

http://www.hijackthis.de/

Unless you are confident using this kind of utility, you can post the log here for a second opinion before deleting anything.

[mo]

Hi

I copied and pasted the  Norton.com/vss and it lead to this page.

No idea of what it does,any ideas?

[mo]

Is it part of Norton Ghost?

[keatkenneth]

ke replies to MO .

NO. It is not part ot Ghost. The VRQ Tool is an independent tool of Symantec to search for and delete malicious programs.
It does NOT provide any protection like Internet Security.
The VRQ Tool is used AFTER you are infected and damaged.
It is used to detect and remove the attack.
I am trying to use this tool better and looking for any advice and information.
Thank you .
Kenneth Ellman

The tool can be foundat norton.com/vss.
Thanks again
kenny

[keatkenneth]

I dont know why this is marked as solved, but I have NOT received any solution to the VRQ problem.

It was clicked on by error.

Kenneth Ellman

[mo]

Hi

I think the URL you give is incomplete,The only reason I have been able to get the screenshot, is when I copy and pasted what you have posted and the browser added the rest and that is where I was lead to.There was no description or indication of what it is or does.I have googled it but have only found bits and pieces.Maybe a Mod can step in and shed some light

The only one who can click solved is you,as only you have the option to do so all we have is the kudos button if it is not our thread.

Sorry I can not be of help.

[keatkenneth]

Hello,

               The Norton Symantec VRQ Tool is located at:

Norton.com/vss

There is no danger in downloading this tool from Symantec. Even if you run it there are no changes. 

Changes only take place if you make them by using the "Full Mode Cleanup" or other choices AFTER you run the tool and get a report. 

It is also very easy to delete from your system after installation. 

 Yes, I may have checked the solved button by error.

If anyone developes any knowledge with this tool please let me know.

I believe it is very revealing. 

   Thank you.

Kenneth Ellman