• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Norton Power Eraser & Rootkits

Hi.

To get my computers to work normally I have to run NPE (or another rootkit scanner like Kaspersy TDSKiller).

There are numbers of erroneous behaviour after normal cold/warm boot and sleep - a rootkit scan seems to remedy ditto.

Setting Norton Security - Antivirus - Aggressive Boot does not fix the problems.

Looking at History log (Firewall - Network and Connections) I can see that, w/o NPE scan, it shows: "Connected to a restricted network. (<Hex string>)".

But, after a Rootkitscan it shows: "Connected to a restricted network. (127.0.0.0/255.0.0.0)" & "Connected to a restricted network. (<Hex string>)".

Could the absence of "Connected to a restricted network. (127.0.0.0/255.0.0.0)" be a sign of something bad infecting my computers?

Any scanning-tool, tougher than NPE, that I can use?

Replies

Kudos1 Stats

Re: Norton Power Eraser & Rootkits

NPE is about as aggressive as you want to get on your own. Unless you are a malware expert and know what NPE is trying to delete, it can actually leave your system unbootable.

If you are having to run NPE more than once, you have a serious problem with your computer.

I would suggest contacting Norton Support and asking for the Virus Protection Promise. They will remote into your system and clean out what they find.

Things happen. Export/Backup your Norton Password Manager data.
Kudos1 Stats

Re: Norton Power Eraser & Rootkits

00360:

There are numbers of erroneous behaviour after normal cold/warm boot and sleep

Such as?  I am not sure the logging or lack of logging of your localhost network by Norton is anything to worry about.  Please provide more information about what sorts of problems you have if you don't run a rootkit scan.

Kudos1 Stats

Re: Norton Power Eraser & Rootkits

Hello

I would recommend that you visit one of the free malware removal sites  that we recommend. They can help you to check out your computer to see if it is clean or infected. If infected, they can help you to clean it up safely.They can tell if you have a rootkit or not. You definitely shouldn't have to run NPE so often.

Please see this link for an up to date description of these sites plus the addition of a newly listed site formed by one of our successful malware remover users who unfortunately has passed away. That site is still being run by a good expert who happens to be one of the other Gurus.  The new site is listed first in this link.

https://community.norton.com/en/forums/malware-removal-forum-recommendations

If you installed Norton on an infected system, that is not a good idea either.

Thanks.




 

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NSBU 22.17.0.183 Core Firmware 270 I E 11 Chrome latest one
Kudos0

Re: Norton Power Eraser & Rootkits

It seems to be a random plethora of errors, affecting e.g. web-browsers (log-in pages continually reloading), touch-pad (stops working / moves the cursor automagically), and, worst, NS.

Let me take an example - I can't see any other complaint about NS Graphs in the Forums. Since months _I have, on several computers_, had problem with Graphs not working w/o a rootkit scan. Used Norton Removal and Reinstall three times ( two times the auto function and once "Advanced" - uninstall and then manual install) - No remedy!

Kudos0

Re: Norton Power Eraser & Rootkits

I have spent a lot of time on these computer problems. e.g. Malwarebytes scan reveals some PUP/PUA - sent all these ( and MANY other files) to TotalVirus, which utilize about 60 scan engines - nothing really bad found (in two cases 1 or 2 out of 60 reports a possible problem).

Kudos1 Stats

Re: Norton Power Eraser & Rootkits

The PUPs found by MBAM could be causing your problems. They are usually browser redirects, or other types of adware that gets installed alongside a legitimate download. As they are items that do not damage your system, it is not surprising that a virustotal would not have many/any detections.

Let MBAM remove the PUPs and see if it helps with your issues.

If that does not help, for your peace of mind, try the Norton Virus Protection Plan or one of the sites floplot noted in the post above.

Things happen. Export/Backup your Norton Password Manager data.
Kudos1 Stats

Re: Norton Power Eraser & Rootkits

Do the rootkit scans find anything?  Your symptoms don't really sound like something malware would do, especially a rootkit, which is designed to be stealthy.  Dozens of puzzling but essentially minor issues would sort of defeat the purpose of installing a rootkit.  What operating system are your using?

Kudos0

Re: Norton Power Eraser & Rootkits

Letting Malwarebytes quarantine the PUPs and PUAs does not remedy anything - done that several times.

GMER, Kaspersky TDSKiller, FSecure and TotalVirus etc does not find anything really bad.

So, I contacted Norton Support who transfered me to Norton Live Spyware and Virus Removal - VRQ Threat Remediation Tool (5.0.23.420) scanned two of my computers (different brands) with the same problems. The worst finding was DNS Unlocker (the only thing the support person mentioned). I also could see a bunch of Registry entries concerning TCPIP beeing erased.

But, on both computers the Graph is still not working after shut down and (cold) boot!

And, in the Norton Forums, I don't see any other person who (now) has the same problem!?

So, what's left to do - The above mentioned "Malware Removal Forum Recommendations"?

Kudos1 Stats

Re: Norton Power Eraser & Rootkits

If you are only concerned about the graphs not working in Norton, you are not alone. And I would suggest you are worrying far too much. Hackers are more interested in your personal information than disabling a very minor feature of Norton Security.

For peace of mind, you should sign up at one of the free malware removal sites noted above. They can remove anything they find, or verify that your system is clean.

Things happen. Export/Backup your Norton Password Manager data.

This thread is closed from further comment. Please visit the forum to start a new thread.