• Todas as comunidades
    • Todas as comunidades
    • Fóruns
    • Idéias
    • Blogs
Avançado

O que você está procurando? Pergunte a um especialista!

Kudos0

Problem NPE

Bizarre issue with Norton Power Eraser. I have Two Norton Power Eraser's. Both are legitimate, one I download ages back AND I have a second one that came built in to Norton 360  Premier Edition (or whatever, its exact name escapes me at this point). Anyway, the other day I clicked play on a vid on the Internet (my fault for going outside the outright (or at  least by comparison) safe vid viewing of youtube) and got a windows update prompt (the legitimate type, the shield update sitting on the shutdown button).

Knew it was fake to an extent, but unsure what to do and stupidly not thinking I shut down.

Moment it booted up I ran a Full scan. After that I ran NPE from the NPE shortcut on my desktop after full scan was done. Nothing, no threats.

Now things get interesting. I would print screen, BUT I don't want the risk of the (likely) virus to spread to my laptop, so I'll explain. With no threats found I dismissed  the risk of a threat, went net surfing for some stuff, fine. When I finished web surfing I ran ANOTHER NPE scan, this time from the one built in to Norton 360  Premier. THAT NPE scan found 11 threats. They were:


naveng.sys (in the list a few times)

navex15.sys (again, in the list a few times)

and: idsvix86.

Clicked remove threats, they fail to remove.  After the fail to remove I retry, using the same NPE inside Norton 360  Premier, now it loops at "Norton Power Eraser has successfully restored Internet or Synmatec server connection" etc. etc. Occasionally the loop gets broken and you get the serach results. Same 11 threats. Same fail to remove, loop cycle starts again. Fed up with the continually looping, I decide to google research the 11 none removing threats, are they components of Norton? (they seem to be) If they are does that mean my Norton is infected/compromised    

Labels: FullScan, N360

Respostas

Accepted Solution
Kudos1 Stats

Re: Problem NPE

Hi ph771,
NPE is a powerful removal tool. It may cause false positives and delete legitimate files.
Rather than hanging with NPE, I suggest you to visit any of the free malware removal forums at below link.
http://community.norton.com/t5/Tech-Outpost/Malware-Removal-Forum-Recommendations/m-p/1059145/highlight/true#M8593
regards, CV | There is no ONE TOUCH KEY to security . Be alert and vigilant. . | Always have a Backup Plan!
Kudos0

Re: Problem NPE

Thank you. Considering whatever this thing MAY be (I'm likely being paranoid), it HASNT done anything (no browser hijacks, file screwups or anything), odds are one NPE is being thrown by the other, having TWO is weird as is. Not sure how I managed that. Lol.

Kudos0

Re: Problem NPE


ph771 wrote:

Thank you. Considering whatever this thing MAY be (I'm likely being paranoid), it HASNT done anything (no browser hijacks, file screwups or anything), odds are one NPE is being thrown by the other, having TWO is weird as is. Not sure how I managed that. Lol.


Nothing unusual with having two.  I have seen this in the past and I actually had two at one time.

The NPE was a separate program awhile ago and it never got uninstalled when the NPE became a part of the

 GUI.

If you go to Control Panel > Programs & Features and locate the NPE  entry and uninstall it, then it will end the weirdness.  This is an older version anyway and the one which is part of your N 360 is more current and will remain for your use - if needed!

Kudos0

Re: Problem NPE

@yank ,

Just an FYI, NPE does not install like most programs.  If you (or the OP) have downloaded it separately all you need to do is right click it and choose Delete, done.

Windows 10 x64 1903
Kudos0

Re: Problem NPE

@Krusty13,
Does that mean, it has no registry entries, similar to like a portable app?
[sorry if its a dump question]
regards, CV | There is no ONE TOUCH KEY to security . Be alert and vigilant. . | Always have a Backup Plan!
Kudos1 Stats

Re: Problem NPE


Nikhil_CV wrote:
@Krusty13,
Does that mean, it has no registry entries, similar to like a portable app?
[sorry if its a dump question]

Hi CV,

I don't go into my registry to check but I guess that is correct.  NPE doesn't (or shouldn't) appear in the list of programs to uninstall.  The instructions here do not mention installing NPE, just where to save it and to double-click to run NPE.

Cheers.

Windows 10 x64 1903
Kudos0

Re: Problem NPE

Just reporting in to say I deleted the original NPE I had from my desktop (meaning I now have the NPE built in to my current version of Norton). "No risks found" , it appears (and it makes sense) "false positive" was correct. Having TWO NPE's was clearly the issue. 

(There was a MOMENT of seemingly odd behaviour during the scan,  but odds are it was nothing, I've never paid attention to all those spilt second scan text bits before, so it will have seemed odd simply because I haven't paid attention to the process is all)

With a no risks found outcome and everything working/being/is fine I'm deeming the matter resolved. Thank you for your help.

Kudos2 Stats

Re: Problem NPE

ph771,

Glad you got it sorted and FWIW here is some more info on the NPE and it's progression (no not a complete history).

I currently have 3 different versions of the NPE in my download folder from previous downloads:

from March 23, 2013   3.2.0.2.3

from Sept 24, 2013      4.0.0.49

from Feb 3,2014          4.0.0.57

I also found information on version 2.0.0.52 which I do not seem to have in my downloads.  The removal of this older version does in fact show the use of the Control Panel unistall method of uninstallation - so that's probably where I got it from.  Although the information is in an ad for an uninstaller, it does mention registry entires to be removed manually.  Remeber I did say in the past. 

These are separate downloads, not associated with the NPE now found with the scan options of NIS (although I'm sure the one with NIS is the most current one).

I also found the following as CV does seem interested in locations:

Starting from Norton 2013, the product initiates a LiveUpdate session and downloads Norton Power Eraser executable to the local computer, when the you select the NPE option on the scan page. Once the download is complete, you can perform a scan using Norton Power Eraser.

The NPE executable is retained on the local computer for future use. When you click on the NPE option upon the completion of subsequent manual scan, it invokes NPE executable from the previously downloaded location.

LiveUpdate downloads and stores NPE executable in the following location:

Windows XP: C:\Documents and Settings\All Users\Application Data\Norton\[Silo ID of the
point product]\Norton point_product_version\

Windows Vista, 7 and 8: C:\ProgramData\ Norton\[Silo ID of the point product]\Norton
point_product_version\

 In my win 7 system,  [Silo ID of the point product]\Nortonpoint_product_version\  appears to translate to:

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.1.7\NPE.exe

Hope this addtional info proves helpful to someone!

Kudos2 Stats

Re: Problem NPE


ph771 wrote:

Thank you. Considering whatever this thing MAY be (I'm likely being paranoid), it HASNT done anything (no browser hijacks, file screwups or anything), odds are one NPE is being thrown by the other, having TWO is weird as is. Not sure how I managed that. Lol.


You do not mention the possibility of keyboard loggers. 

For your piece of mind, I would suggest you go to one of the free malware removal sites from the link Nikhil_CV's post above. They will be able to scan your system and confirm whether or not you have any problems.

Things happen. Export/Backup your Norton Password Manager data.

This thread is closed from further comment. Please visit the forum to start a new thread.