• Todas as comunidades
    • Todas as comunidades
    • Fóruns
    • Idéias
    • Blogs
Avançado

O que você está procurando? Pergunte a um especialista!

This forum thread needs a solution.
Kudos0

Norton Core Hacked??

I bought a Norton Core in Feb of this year. I have been quite pleased with it's overall operation and performance. My experience includes building, running,and owning an ISP back in the late 90's until cable took over and been with computers and the internet ever since..   I was able to set the Core's Firewall to Aggressive and set the Firewall on my Laptop's Norton Security to Aggressive.  Each day when I start my Laptop up and it's all Booted Up, I empty my temp files and do a scan disk. Then I do a Defrag and Optimize. Then I launch Norton Security on my Laptop. When fully launched I connect to my Internet. When connected I launch Norton Security Update, to get the latest updates for the day.    On 14th of this month, 9/14/18, I connected online and Launched Norton Security Updates,,Have way thru the Download, with No Browser launched yet,

Then a White Screen with Blue Lettering appeared over Norton,,The Blue Lettering was flashing "Caution Alert" and at the bottom it was showing a Download in progress,,So I Pulled the Plug and Took out the Battery before the downloading was complete,,I Believe a Malware Virus Piggy Backed on the Norton Update Download ,Now when I try to start my Laptop up,   ,Power light comes on, but Does NOT Boots up, Screen remains dark,,,Can Norton HELP?  I Think NOT!!    When I use Chat Support,,I get someone who has NO Clue as to what I'm talking about, I get dropped, or they keep trying solutions they are reading from scripted answers to questions, while they handle who knows how many other people at the same time.   When I get a call or I call Norton Support, I get someone that tells me "NO Way Can Norton Core" can have this Happen. WELL IT Happened to me!!! Now I'm left to Deal with my main Laptop with my life on it!!!!!!  I'm Only a Newbie with Norton,

Respostas

Kudos1 Stats

Re: Norton Core Hacked??

Although your description is pretty thorough it's still a little hard to understand exactly what you saw and what it may have been. As for Norton Core specifically, it does not get updated in the way you describe, what you are describing is updating Norton Security software on your laptop. It appears you may have interrupted that download. I am not certain if that can cause a laptop to not boot. Have you tried to boot into safe mode? Have you posted your question in the Norton Security forum?

As for Norton Core, the router although it may be passing the details / data down to your laptop, it's not controlling what you saw on your screen.

Kudos0

Re: Norton Core Hacked??

All: The larger issue is what OS is installed, if Windows there are several "out of band" updates that have been released of late. Specifically, one on the 14th KB4100347. Then on the 18th KB4464218. These updates require a reboot as I have gotten them on all my W10 systems. Was that update interrupted on the 14th?

The OP can remove all power, press and HOLD IN  the power button on the laptop for at least 60 seconds. Then apply ONLY wall power to start the laptop. Then try to boot into safe mode. Here is how to start a Window 10 PC in safe mode in the event the OS is W10.

Adding pain to misery there are NO USER SETTINGS for a firewall on Core, only DPI (Deep Packet Inspection) with the highest setting being "Advanced" found under "Security>Network Inspection in the Core app. Selecting advanced can limit overall performance since it will inspect ALL unencrypted traffic into Core. The Core router wasn't involved since Core will never update via a web browser interface. 

In my product, NSBU there is not a setting within the firewall portion to set to aggressive other than in the firewall settings under "Advanced Program Control", you can set "Block Traffic for Malicious Applications" to aggressive . Conversely. Boot time protection can be found per the screenshot below. I have the latter set to aggressive and have never had any issue with that setting.

IF the OP is indeed on Windows 10 the constant defragmenting and optimizing manually isn't necessary and really an overreach since W10 does an awesome job of maintaining itself. These maintenance tasks SHOULD be set to run at idle time when the computer isn't in use for the best results.

The OP should also have a look at their ISP device and check for a firmware update as it MAY be vulnerable. There are many CVE's listed in current and past CERT listings and for multiple vendors.

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Home / Professional x 64 version 1903 / build 18362.295 / N360 Deluxe 22.18.0.213 / Norton Core v.282 on Android 2.00
Kudos0

Re: Norton Core Hacked??

Malware cannot piggyback on a Norton LiveUpdate download.  There are controls in the process that check the authenticity of each Norton update before it is downloaded and installed.  Pulling the plug on a computer, rather than shutting it down properly, can cause serious issues if data is being written to the hard drive when power is lost.  This can sometimes cause a PC not to reboot.

Kudos0

Re: Norton Core Hacked??

Gentlemen, Please, Read my problem again,,Never did I say was updating Norton Core,,And I didn't INTERRUPT Norton Security Updates,,,When the Update was in progress, No browser running, ANOTHER Screen appeared over the Norton Security Update, REPEAT,,When the Update was in progress, ANOTHER Screen appeared over the Norton Security Update, losing keyboard control, and YES,if the only program connected to the internet was Norton Security Update, I would describe that as piggy backing , ,,,,,So when you are Faced with a Problem such as I had and you Only have as little as 10sec to make a decision ,,I was Simply  Downloading Norton Security Updates, And Then you Lose control of Laptop, and there is a WHITE Screen w/blue lettering, At the top flashing, <<<ALERT-ALERT>><CAUTION>> ,,and at the bottom it was showing downloading progress,,,My 25yrs experience told me,,Pull Plug and Pull Battery,,Stop this Download anyway possible, since my keyboard was dead,,,,What Would You Do?  

Kudos0

Re: Norton Core Hacked??

First, you are in the Norton Core forum and your subject is trying to imply that Norton Core was hacked. Second, you just repeated again that you were updating norton security. If you unplugged your laptop at that point, I would say you did INTERRUPT the norton security updates. How else would you describe that?

As for the alert without knowing more details I don't know how I would have reacted. I could have been a number of things. A PUA (potentially unwanted app), some ransomware, actually it could be anything, but without more details i don't know if we could guess.

Kudos1 Stats

Re: Norton Core Hacked??

D Zadar:

...if the only program connected to the internet was Norton Security Update, I would describe that as piggy backing

Actually, it is likely that multiple programs had internet access in the background at the time.  You can use Tcpview from Microsoft to see all of the network connections at any given time -- and, believe me, there is a surprisingly large number of them.  I wasn't criticizing you for doing a hard shutdown, only pointing out that that, rather than malware, is the most likely cause of the failure of Windows to boot afterward.

I am also curious about what might have been responsible for the " <<<ALERT-ALERT>><CAUTION>>," download in progress notification.  Obviously, malware does not typically alert users when it downloads and installs.  You really need to figure out where that came from to get to the bottom of this.  Had you seen anything like that before?  Do you have any other security programs installed?

Kudos0

Re: Norton Core Hacked??

Matt, I'm NOT Implying Norton Core was Hacked. Thus the ? mark.  As for Unplugging and taking Battery Out,,When you lose ALL Keyboard and Pointer Controls,,and you observe a Malware of some kind downloading.,. Would you then rather let whatever it was download and install????  It Sure as Hell was NOT a Norton Download,,,YES,  I would also say I " Interrupted " Norton Security Updates,, BUT NOT BEFORE whatever it was that took CONTROL of my Laptop,,Running right over Norton Security Update in the Process,,,I'm sure when I get my main Laptop back running, We'll see what the Norton Security History recorded.   If the history shows NO security problem when it happened, I'll be the first to apologize, But I doubt you will do the same if the history shows what I expect it to show. If it Does show an intrusion, will You or Norton reimburse any Cost??        

Kudos1 Stats

Re: Norton Core Hacked??

All: I wasn't criticizing either, just pointing out the obvious about the shut down as well. In fact the question remains. Has the OP checked his Core app notifications for an intrusion? If so, Core would also inspect all traffic sufficiently even with the suggested normal setting and a notification sent to the Core app accordingly. They can check there for any intrusion attempt being logged in notifications.

If their Core is setup with an ISP device before Core in the network (NAT-NAT) Core cannot protect this part of the network and any devices connected to it. Thus was the suggestion on my part to check the internal settings of any ISP device for a more current firmware download. Most devices will automatically check on a scheduled basis however it never not a good idea to check manually.

Previously the question was raised about what OS is installed, is it up to date? We should also ask what browser is the default whether that browser was in use or not. IE: In a Windows environment, Windows XP and higher are "constant connected" once the system has completed the BIOS handoff to Windows. That being said Norton should be doing an automatic self check once boot time has completed and looking for the latest definitions set.

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Home / Professional x 64 version 1903 / build 18362.295 / N360 Deluxe 22.18.0.213 / Norton Core v.282 on Android 2.00

This thread is closed from further comment. Please visit the forum to start a new thread.