Hi all
I use Norton Antivirus 2008 on a Windows Vista Home Premium OS with Vista service pack 2
First let me say that I know I need to upgrade and soon will. However, this is the question I have now.
In the past when I would run a scan ( either quick or full scan) my Internet worm protection activity log would show:
An instance of "C:\Program Files\Norton AntiVirus\Navw32.exe" is preparing to access the Internet.
This would be followed by several instances of rundll32.exe
then after a scan I would get two instances of rundll32.exe for every tracking cookie found
Now I only show in my Internet Worm Protection Activity log
An instance of "C:\Program Files\Norton AntiVirus\Navw32.exe" is preparing to access the Internet.
without any instances of rundll32.exe
I also notice that when I hit fix to remove the tracking cookies, they get removed much faster
So my questions are
1. Have others noticed this too?
2. Has there been a change in the scanning process not using the rundll32.exe?
I looked at my defs and they are up to date
I did notice that it seemed like there might have been a large update yesterday?
I'm somewaht concerned that maybe my NAV2008 has been compromised and that maybe it is not truly scanning and removing
As you may know, NAV2008 has an inbound firewall function. I notice that that function is still blocking unused ports that are trying to be accessed