• Toute la Communauté
    • Toute la Communauté
    • Forums
    • Idées
    • Blogs
Avancé

Pas ce que vous cherchiez ? Demandez aux experts !

Ce sujet a besoin d'une solution.
Remerciements0

Messages of Attack Exploit and Quick Scan crashes

Hi.

Today, messages from Norton Security saying that it had blocked an Attack Exploit started to appear. The information displayed said it had something to do with the file Norton.exe. Whenever I try to run a Quick Scan, the scan crashes after a while: all Norton windows open are shut. I ran it 3 more times and it crashes when it is analyzing the following file: c:\ProgramData\Microsoft\Windows\StartMenu\Programas\Startup\desktop.ini.

My operating system is Windows 7.

Could you help me please?

Réponses

Remerciements0

Re: Messages of Attack Exploit and Quick Scan crashes

We experienced an exploit attack on one of our Windows 7 workstations recently.  All workstations use the most recent version of Norton Security Deluxe.  The odd, disturbing part of the attack was the program and program path listed in the warning message:

PROGRAM:  Norton Security

PROGRAM PATH:  C:\Program Files\Norton Security\Engine 22.16.3.21\NortonSecurity.exe

Normally, the Norton-blocked exploit attacks involve a third party program (e.g., Microsoft Word).  I have never seen the NortonSecurity exe file listed like this (as the vulnerable program that had been closed by Norton Security, which seems rather circular).  One effect this had was to shut down the Norton Security service on the workstation.

We are concerned about the security status of this workstation after the event above occurred yesterday.  What does it mean and what should we do to solve the problem?  Thanks very much.

Remerciements0

Re: Messages of Attack Exploit and Quick Scan crashes

Hi rick17 and John92,

Thanks for reporting the issues you're seeing.

Symantec engineering teams are currently investigating this.

-Torrey Umland

Remerciements0

Re: Messages of Attack Exploit and Quick Scan crashes

All: I posted about this in another thread although the thread is related to an issue with password manager 2FA authentication. Its weird that Norton reports its own executable back to itself under Community Watch.

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.270 on Android 1.93
Remerciements0

Re: Messages of Attack Exploit and Quick Scan crashes

Thank you for your feedback. Until the issue is fixed, what should I do to keep my computer safe?

Remerciements0

Re: Messages of Attack Exploit and Quick Scan crashes

Hello Rick. It was suggested in another thread to disable ALL the "exploit prevention" settings and re-run a scan to see if the problem replicated. The user there was also having scanning issues with crashes. Can you give that a go and let us know if anything changes? Also, you can open your Norton dashboard and look to the left for "get support". Click it and allow the tool to run, it will check for anything needing correcting with your install.

Cheers

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.270 on Android 1.93
Remerciements1 Stats

Re: Messages of Attack Exploit and Quick Scan crashes

SoulAsylum, I disabled all the exploit prevention settings and re-run a scan, as you suggested, and the scan worked fine, now. The «get support» tool didn't detect any problems, though.

Remerciements0

Re: Messages of Attack Exploit and Quick Scan crashes

Awesome and thank you for the feedback. I believe the dev team is on the right track with this issue as that was the premise behind the request. @Torrey Umland 

Retired military (Navy 1980-2002) AO1 (AW) Aviation Warfare Specialist "From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Professional x 64 version 1809 / build 17763.379 / NCSP 22.17.0.183 / Norton Core v.270 on Android 1.93
Remerciements0

Re: Messages of Attack Exploit and Quick Scan crashes

I also had this problem today and it started after a power failure so I thought it might be related due to the PC not being shut down properly & Norton didn't load correctly after a re-start.  Norton security kept closing each time I accessed my browser both on Internet Explorer and Firefox. I manually would restart the service only to have it stop again. I did a quick scan and Norton removed all cookies. It's been over an hour now and (knock on wood) Norton seems to have stabilized. (And my Norton message for the blocked exploit attack was Norton blocked an exploit attack - Signature ID 61000 - PROGRAM PATH:  C:\Program Files\Norton Security\Engine 22.16.3.21\NortonSecurity.exe - Exploit prevention blocked the attack and closed the vulnerable program to keep you safe.)

Remerciements0

Re: Messages of Attack Exploit and Quick Scan crashes

Meanwhile, I turned on all the Exploit Prevention settings, ran a quick scan, and all went well. Whatever was the problem, it seems solved.

Remerciements1 Stats

Re: Messages of Attack Exploit and Quick Scan crashes

Hi rick17,

Thanks for following up and sorry for my delayed response. A fix was made available via LiveUpdate same day (1/16/2019). After running LiveUpdate the issue should resolve.

Remerciements0

Re: Messages of Attack Exploit and Quick Scan crashes

Hello,

Thanks for following up about the exploit problem.  Is there a way that I can verify that this particular LiveUpdate fix was applied to a specific machine running Norton Security (perhaps through one of the history logs?).

John

This thread is closed from further comment. Please visit the forum to start a new thread.