Welcome to the Norton Forums! Scan the threads for topics of interest or create your own. For fastest results, use our search feature to find related conversations. Symantec employees also post here when they can. So don't be shy -- join the discussions!
03-08-2014 09:52 PM - edited 03-08-2014 10:06 PM
Three days ago, I had a Fake AV Website 32 attack that was blocked by Norton Internet Security 2011. What made this different from other blocked attacks that I’ve had in the last year, was that this time, I wasn’t on the internet using my browser. Later that night, once again, without using my browser, I had another FAKE AV Website 32 attack, from a web address different than the first one.
About two hours later, I had a Malevertisement Redirect Attack that was blocked, attributed to another web address. Once again, I wasn’t using my browser at the time. In all three cases, NIS said that the attack "resulted from \Device\HardDiskVolume3\Program Files\Spybot - Search & Destroy 2\SDFSSVC.exe."
A few hours later, I had another Malvertisement 3 attack, emanating from the same web address as the prior one, and linked to the same Spybot file, which was blocked by NIS.
The next day, there was another Fake AV Website 32 attack that was blocked, attributed to the same web address as the first Fake AV Website 32 attack. This happened again three hours later, and then two hours after that, there was another intrusion attempt, this one a portscan, which unlike the prior attacks, was of medium severity. The others were all high severity.
All of these attacks occurred with my browser closed, and none of the scans done with NIS turned up any malware at all. The Spybot file which NIS had implicated in all of these attacks, with the exception of the one portscan, came up clean in every Norton scan that I’ve done since the first attack occurred.
I used Norton Power Eraser several times, and it found nothing wrong.
Spybot turns up nothing with the system scan or the rootkit scan, and Malwarebytes found no compromised file on my computer throughout all this.
Yesterday, I didn’t see any portscans or any attempt Fake website attacks or any Malvertisement attacks, until late in the day, when I saw yet another Malvertisement Redirect attack coming from the same website as before (but this one occurred with my broswer open, unlike all the others), followed by a portscan two hours later with the browser closed. I did notice earlier in the day that when I went to a secure bank site, there was one IPS submission having to do with jscript.dll. Also, I’ve noticed more than a few references to "rule rejected TCP(6) Traffic" over the last three days, usally occurring not long after I first turn on my computer, or waking up from sleep.
I’ve noticed a few attempted attacks over the last year, and they were usually either Fake website attacks or Exploit website toolkits, but they all occurred while I was using my browser going from one site to another. What concerns me is that the attacks I’ve seen this week all, with one exception, occurred with my browser closed, and with Norton, Spybot and Malwarebytes not finding any compromised file in any system scan (even though NIS says that all of these attacks, but for the portscan, emanated from that one Spybot SDFSSVC.exe file). I've also never seen this many attacks in such a short span of time.
I did go to Yahoo and put the names of all three of the websites that were linked to the attacks, but all three of them had green Norton boxes. They were all supposedly safe and secure.
Why would this be happening? What is going on?
03-08-2014 06:30 PM - edited 03-08-2014 06:37 PM
i have a problem with NIS 18.104.22.168 .How to fix it ? in windows 8.1, NIS 22.214.171.124 works very well. But in windows 8.1 update 1 ,NIS doesn't work
03-07-2014 05:29 PM
Despite using Norton faithfully I seem to have something called Start Savin infecting my laptop. I get advertising popups, etc. I've uninstalled it, but it's still there. I tried disabling the Add-on in IE, but can't. Does anybody know how to get rid of this? I'm running Windows 8, IE 10.
I'm new to the Norton community so I apologize if this is posted in the wrong place.
03-07-2014 11:16 AM
Automatic scan everyday worked fine.(NIS,latest version, and Windows8)
Today scan not finished with error 3038,104
Installed latest updates (7/03 19h30)
Checked if product was ok.
Problem: Cannot start my scans anymore.(click on scan,but no reaction)
Windows8 has also latest updates
03-07-2014 06:15 AM
If you could please update this thread:
Will this be corrected soon?
03-07-2014 01:37 AM
When I click Quick Scan and Full Scan, nothing happens at all. No errors, no messages, no popup windows, no scan verification. The program doesn't freeze or anything, and I can continue to navigate to other menus and do other things on my computer at the same time, it just doesn't do ANYTHING
I had this problem about 2 weeks ago. I finally had to perform a complete uninstall and then reinstall of Norton (very tedious) – this worked - but two weeks later the problem has come back. Not being able to perform scans is a serious problem and performing complete uninstalls/reinstalls on a regular basis is not an acceptable solution.
(Norton Internet security, on an XP, desktop system)
03-07-2014 12:28 AM
Norton Internet Security 2014 LiveUpdate slow on my Windows 7 x64 ultimate?
Liveupdate trying to download 100+mb update but cannot complete in 24 hours even.
Network perfect in all other systems and downloads, only liveupdate
NIS 2014 ver126.96.36.199
When running to "new version check" for latest version it says I have the latest but I know theres a new version??
03-06-2014 01:34 PM
I have NIS 2014 installed. For a period of time, I need to block all Internet traffic, but keep LAN connection open. How do I do that in NIS?
I know that NIS has a setting called Block All Network Traffic, but that's not what I want as it blocks everything, including LAN connections.
I want to block Internet, but keep LAN connections open.
Thanks in advance.
03-06-2014 08:04 AM
HOW do I change text editor default so that Norton does not open Open Office .html and .htm files?
This problem began several months ago when I began formatting resumes in html; I never changed or selected any new default settings, simply used Open Office web doc (html). Subsequently, Norton opens "Support" and other manual requests in an html doc rather than via my Firefox browser.
A previous community member (Dave H., 09-03-2013), responded to a similar problem that:
"It happens because you have your text editor set as the default file association for .html and .htm files. Unless you have a very good reason to use word/open office for these file types you should remove those associations."
However, that post did not indicate how to do so, and I have spent a fair bit of time looking for that control function, to no avail. Thanks -- in advance -- for pointing the way...
03-06-2014 07:13 AM
I've been trying to renew my Norton subscription today, through the "Express Renewal" popup. I purchased the NIS package and tried downloading it, however it only gives me the error message "Another download manager is currently running. Please wait for it to finish and try again."
03-06-2014 06:48 AM
I am running Outlook 2010 on Windows 8.1. Just 4 days ago I installed the latest NIS version and have just found that none of my emails snet since then have actually gone anyehere - they are not even in the Sent folder, This is happening with all my email accounts some of which are IMAP and some simple POP - it all looks like it works but there is no trace of the message after teh Send key is pressed.
Is there a simple NIS setting that I can change? or is this something worse?
03-05-2014 08:12 PM
Hello-I am running the latest update of NIS on my computer. I am running Win8.1-64bits,IE11,1TB HDD,12 GB memory.I received offers to enroll in PC Health KIT and PC Utilities, Have you encountered negetive information pertaining to the reliability of either of these products? I downloaded a similar product once and it corrupted my Windows Installer. I need advice from a reliable souce about any product before purchasing it. Thanks.
03-05-2014 06:35 PM - edited 03-05-2014 06:42 PM
I've got Norton 188.8.131.52 (I guess it's 2014 version) but I liked nis 2013 more.
Can someone tell me if the norton Internet Security 20.4.40 is compatible with Windows 8.1 or not. Where can I find it's download link.
03-05-2014 04:10 PM
Had a virus last week that shut down my internet connection. Without it Norton will NOT run. Why does Norton need to update before it can run scans? The last update before I lost the internet was only 15 minutes old. System restore saved the day but I lost a lot of stuff.
Is there anyway to make it run scans without running updates first?
03-05-2014 12:38 PM - edited 03-05-2014 12:40 PM
Is it not important to update to Version 184.108.40.206 ??? Because the ordinary user wont ever find it the current way ?????
03-05-2014 11:33 AM
I've read the many posts on this question. There never seems to be a clear answer. Delete the history ... Delete the qbackup directory.... Some say the file is deleted from your system, yet still exists for recovery purposes .... Some say to remove NIS program from your system, but others say that these things are not removed. How Do I Delete/REMOVE from my system all traces of the quarantined items.
I've got over 520 .qbi files on my system in many qbackup directories spanning many years. Yet, my history file shows 7 items. What do I have to do to eliminate all traces of these things from my system? Yes even the encrypted, recoverable "non-files" that exist on my system.
Any I also agree with everyone else. There needs to be a delete option in the quarantine to accomplish this task. And then, what about previous files from previous versions of the Norton Products.
03-05-2014 10:59 AM
I'm running NIS 220.127.116.11 on Windows 7 with all updates (and all NIS Live Updates being applied). Periodically, the background scans fail. When I try to run interactively, I get error 3038,104.
I've been a good dog and followed all the advice already in the forums for this error, including running Live Update until no more changes and then restarting. This got the scans running again, but not for long.
When the error recurred after less than a day, I downloaded and ran the Intelligent Updater, and then restarted.
When the error returned again, I ran the Power Eraser. It did list 3 items, one of which it had marked for deletion. It was a small application that I no longer needed, so I told it to proceed. I then tracked down the other 2 items that it listed as unknown or suspicious and manually removed the applications associated with them.
At this point, neither, Quick Scan, Full Scan, or Power Eraser detects threats of any kind.
Oddly, sometimes my manual Quick Scans will detect no cookies at all, especially after one of the restarts, and then when I immediately run another Quick Scan, it will find and purge many cookies (as I have configured it to do).
At any rate, even when I get things running again, eventually, after 12-36 hours, one of the background scans will fail again with the 3038,104 error, and all subsequent scan attempts fail too until I intervene once again.
Curiously, I can usually find a background Live Update sessions occuring in the logs just about the same times that the scans are failing the first time.
Is it time to uninstall and reinstall NIS?
If so, does the NRnR tool work when I am already running the latest NIS version?
03-05-2014 09:49 AM - edited 03-05-2014 09:49 AM
Using NIS ver. 18.104.22.168 on Windows 8.
Quite often whin I right click on the NIS icon in the Notification Area and select "View Recent History" nothing happens. At other times it works.
There seems to be no particular conditions when there is no acton.
How do I get this to work?
03-04-2014 07:41 PM
Moved to Norton Toolbar/Identity Safe Board for better exposure.
03-04-2014 05:03 PM
After the down load it fails to process. This error has happened since this morning when I was able to process the updates.
What's going on?
03-04-2014 02:29 PM
Sorry for the two posts (I think the issues are related, but wasn't sure if they should be in the same thread).
Earlier today, I had Live Update fail to install Virus Definitions x 64. I ran live update a second time and it said it was successful. Several hours later, I started getting a 3038, 104 error when trying to run scans on files and folders. I followed the instructions in the knowledge base article on 3038,104 and scans seem to be working again, but should I be concerned? I've been using Norton for several years and this is the first time I've ever had scans fail, so I'm feeling a bit twitchy.
03-04-2014 10:20 AM
Anyone else having trouble with manually running Live Update? Both yesterday and today, my Virus Definitions x64 and AntiSpam failed. Running Live Update a second time both days seemed to fix the issue (though it downloaded the large 191 MB file).
I know the servers were having trouble last month and in January, but haven't had an update fail in a while so was curious if anyone else was experiencing problems.
03-04-2014 09:27 AM
I just found out about NIS 22.214.171.124 not being pushed via Live Update.
1) Do I really need it? - I would have to configure all my custom settings all over again, right?
2) Will this be "wrapped up" in the next Product Update distributed via Live Update?