Norton Internet Security / Norton AntiVirus

[thomic]

How do I open NIS (2007, if that matters) from the command prompt?

My problem - I picked up some trojan which doesn't allow me to get into my PC's main windows menu (ie with the program icons), so I want to start up Windows XP with command prompt (no problem with that bit) and then open up NIS from the command prompt to run a scan. Can it be done?

Thanks in advance from a computer-illiterate user.

[TomV]

Hi thomic,

I think it should be possible. Can you try these command lines followed by the switches mentioned here?

Navw32.exe /a  -- To scan all the drives

Navw32.exe/quick -- To perform a quick scan

I recommend that you perform a quick scan first to see if it catches any threat. Then, try performing a full system scan.

Let me know if this works.

Thanks,

TomV

Norton Forums Moderator

Symantec Corporation

[yogesh_mohan]

Hi thomic,

To run the scan from command prompt, use the following commands:

cd C:\Program Files\Norton Internet Security\Norton AntiVirus [Enter]

navw32.exe /L [Enter]

This will start the Full System Scan from Norton program. You can also try to run the Quick Scan as suggested by TomV. The command is as follows:

navw32.exe /quick [Enter]

Let us know whether this worked.

Yogesh

[thomic]

Hi and thanks to Yogesh and TomV for your advice.

Unfortunately, I'm unable to get into Program Files - the message 'Access is denied' appears when I try.

I think it might be the Tidserv trojan - been reading a thread about it. Is it possible to get into the registry from C:\ to disable (or delete) relevant files? If so, is there a list of registry files to look for?

Many thanks.

[yogesh_mohan]

Hi Thomic,

Can you try to run the same Navw32.exe /L from Run command while booting your computer into Safe mode?

Also try running Malwarebytes AntiMalware program or SuperAntiSpyware in meantime.

Download/install Malwarebytes Antimalware program, update the definitions, reboot your computer to Safe mode and then run a full system scan from Malwarebytes. Click Malwarebytes AntiMalware to download it, it's a free download software which may help you in detecting removing such threats.

You can download SuperAntiSpyware from the link given below:

http://www.superantispyware.com/

Install the SuperAntiSpyware, update the definitions, reboot into Safe mode and then run a full system scan as well as quick scan.

Yogesh

[thomic]

Unfortunately, if I boot into Safe Mode, I cannot get beyond the 'Welcome' screen - no desk top access (the same as if I boot up normally). I was advised to boot from the Windows back-up CD, then go into 'repair an installation using recovery console'. This would take me to [C:\Windows] and from there I could go up to [C:\] but when trying to access Program Files, I received the 'Access is denied' message.

All user passwords are reset (including the Administrator), so I don't understand why access is denied.

Unfortunately this also means I can't go online to download anything to the affected machine - and I'm doing this communication from a corporate PC which has all manner of network firewalls and download restrictions.

I was wondering whether it is possible to access the registry without going into Program Files?

Thanks.

[yogesh_mohan]

Hi Thomic,

You can gain access to the registry using the command reg, you will see example of command that you can use to gain access to windows registry such as query, add, delete, copy, save, import, unload, etc. I am not familier with the usage of Registry through command prompt, so won't be able to guide you to through the commands to manipulate registry in command prompt. Incorrect commands may corrupt the registry and sometimes, you may need to reinstall the whole Windows operating system itself in order to recitify it. You can refer to this Symantec Security Response Article which has reference to the registry keys associated with the virus Tidserv.

Also, I would suggest you to try creating the Norton Recovery Disk, boot into computer using it and run a scan. It can help you in cleaning up the viruses. Refer to this Symantec Support Article for more instructions.

Yogesh