I posted my feedback on NIS and after hitting the submit button, a message box popped up displaying Chinese characters. I don’t speak, read or write Chinese but I can recognize when it is Chinese characters. In any event, I have been experiencing slowness with accessing the internet and also when shutting the computer down for the night. Also when I click on One Click Support, the webpage takes more than a few seconds to load up. More like 5-20 minutes!! So I think that Norton is hacked. I was getting help with some technical person and he or she was advising that I Uncheck sites on the blocked sites list (namely, pornography accessed by another user on my computer after I have left for housesitting). My understanding of the Parental Control Add-On Pack is that you check sites you don’t want users to access. That makes the most logical sense to me. Unchecking them does not. What gives? Please let me know how this product works. I am not getting help with Technical Support to date.
Hi
Can you say what Norton product you are using NIS year? Operating system ie XP/Vista and service packs.Have you done a full system scan? Sorry have to ask the basics to get a better idea of whats going on thanks for your patience.
Hi Mo,
- I am using NIS 2009 with Norton Add-On Pack (Parental and Privacy Control).
- XP Home Edition (SP3).
- I do a Full System Scan every day.
- Also, I have noticed today while I was running my Full System Scan, the Pulse Updates are now occurring every 10 minutes!!!! They would update every 5 minutes prior to my Internet Access Problems were occurring April 23, 2009.
- I also did a Scan on Norton's Website and the result said that it was Normal.
- I have noticed after Chatting with a Technical Support person on April 16, 2009, that my Internet Access is very slow. The sites that I visited prior to this date would always display right away. This Technical Support person also made sure he or she was the first to respond to my Request for Chat Support on April 23, 2009!!!!!! I told him or her that I did not want his or her help at all and I ended my Chat Session as I did not want anymore "help" from him or her.
- Also, I have noticed just priot to this Technical Chat Support person responded to my Chat Request on April 23, 2009, that a lot of Message Boxes Displayed very quickly and disappeared without my having the chance to see what the Messages were about!!!!!!
- Quite frankly, I don't see why knowing about my computer information is going to help with WHY Chinese Message Boxes Are Displayed.
- Thanks.
Vista and XP have considerable differences between them. Malware can also affect them or their services differently. Different service packs also have different security issues. It just helps us to know what to look for and what to suggest because we can't deal directly with your machine. Bear with us. We are mainly users like you, some of us have just had a lot of experience.
Hi NotPleaseAtAll,
I've sent you an email. Could you please check it and respond? Thanks!
1. I tried logging in for the first time this morning and I had to try about three times. When I got in and looked at Dashboard, it said that I was logged on for 56 minutes when, in fact, I just logged in.
2. So someone is logging in my profile name.
3. The Number paragraph list does not work. That is what I used in my Post to Mo.
4. Internet Explorer 8 settings change everytime I open it. That is, the Status Bar Menu is unchecked when I have not Unchecked it.
Well since I don't feel comfortable with remote control help and the administrator who responded is going on holidays, I would like help on this forum. Thanks.
Can you do us a favor and download HiJackThis from this site (the third on down - the executable) and run it? Save the log file and post that here for review of what is happening on your system. Someone else (or I) will get back to you very shortly after your post.
NotPleasedAtAll wrote:Well since I don't feel comfortable with remote control help and the administrator who responded is going on holidays, I would like help on this forum. Thanks.
Did you answer Tim on PM? I believe he send you some questions through PM
Yoda, see post #6.
dbrisendine wrote:
Yoda, see post #6.
I don't see it anywhere. I just want to know if he answered Tim so he can be helped
Hi Stu,
I had offered to remote in to the computer and show the user around the product and observe the weird behavior that they are seeing. However, it is not something they are comfortable with.
It would probably help if we had some screenshots of the issues this user is seeing.
Hi Stu,
1. I did reply to him but he said that he was going on holidays. I would have to check my email later on today.
I housesit so I am not here at home all the time. Plus I have to leave before the black and grizzly bears come out to go to the river behind the house I am looking after.
2. FYI, I installed Internet Explorer 8. And I use Firefox for my searching on my profile and encourage my brother to use FF.
3. I had to restore my computer as there was some nasty virsuses, trojans, malaware on my computer. Would that be a reason why there was a IE6 corruption that Norton had just recently found? BTW, after this IE6 site was blocked by Norton my files scanned dropped by 361K to 340K.
4. After I got my computer back from a local computer company, I had to wait for my brother to purchase a NIS 2009. In my research on internet security programs, Norton came up time and time again so that is what my brother purchased for me because I cannot afford to buy it on my income. Prior to this, I had installed a free program on the Internet called Comodo Internet Security and I I can't remember for sure but I think I had Spybot Search & Destroy as well, as they came up quite a lot in my search for free internet security and anti-spyware.
5. I have Windows XP Home Edition SP3.
6. I also downloaded Norton Add-On Pack: Parental & Privacy Control.
7. I disabled a Google/Dell search redirector. Once I did this, the Google/Dell homepage disappeared and I was able to access Dell, Microsoft sites again. But I don't know if I can remove it without corrupting OEM programs that came with this computer my brother gave me.
---------------------------------------------------------------------------------------------
Name: CBrowserHelperObject Object
Publisher: (Not verified) Dell Inc.
Type: Browser Helper Object
Version: 1.1.0.1
File date:
Date last accessed: Today, April 10, 2009, 1 minute ago
Class ID: {CA6319C0-31B7-401E-A518-A07C3DB8F777}
Use count: 264
Block count: 14
File: BAE.dll
Folder: C:\Program Files\BAE
___________________________________________________________
8. Every once in awhile, Java (Not verified) Sun Microsystems files display on the Add-Ons on IE8. So I don't know if they are a part of IE8 or FF.
I think that this is all for now. I hope this helps. Thanks so much.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:20:12 PM, on 4/28/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton Internet Security\AddOns\Norton AddOn Pack\Engine\3.5.0.24\ccProxy.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Norton Internet Security\Engine\16.5.0.135\ccSvcHst.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Norton Internet Security\Engine\16.5.0.135\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ssstars.scr
C:\Program Files\Norton Internet Security\Engine\16.5.0.135\HSLoader.exe
C:\Program Files\Norton Internet Security\Engine\16.5.0.135\OCSCtl.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\**************\Local Settings\Temporary Internet Files\Content.IE5\IIP3E9V8\HiJackThis[1].exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.ca/ig/dell?hl=en&client=dell-row&channel=ca&ibd=2060909
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.ca/hws/sb/dell-row/en/side.html?channel=ca
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.ca/hws/sb/dell-row/en/side.html?channel=ca
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.ca/hws/sb/dell-row/en/side.html?channel=ca
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.ca/ig/dell?hl=en&client=dell-row&channel=ca&ibd=2060909
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.ca/ig/dell?hl=en&client=dell-row&channel=ca&ibd=2060909
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.5.0.135\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.5.0.135\IPSBHO.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.5.0.135\coIEPlg.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.5.0.135\coIEPlg.dll
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Norton Internet Security\AddOns\Norton AddOn Pack\Engine\3.5.0.24\ccProxy.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\16.5.0.135\ccSvcHst.exe
--
End of file - 8161 bytes
Stu,
I forgot to put the Java Add-Ons that I noticed were not part of the TrendMicro logfile. Here they are:
---------------------------------------------------------------------------------------
Name: Java Plug-in 1.6.0_13
Publisher: (Not verified) Sun Microsystems, Inc.
Type: ActiveX Control
Version: 1.6.0.13
File date:
Date last accessed: Monday, November 29, 1999, 5:00 PM
Class ID: {8AD9C840-044E-11D1-B3E9-00805F499D93}
Use count: 0
Block count: 0
File: jp2iexp.dll
Folder: C:\Program Files\Java\jre6\bin
--------------------------------------------------------------------------------------
Name: Java Plug-in 1.5.0_06
Publisher: (Not verified) Sun Microsystems, Inc.
Type: ActiveX Control
Version: 1.5.0.6
File date:
Date last accessed: Monday, November 29, 1999, 5:00 PM
Class ID: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
Use count: 0
Block count: 0
File: jp2iexp.dll
Folder: C:\Program Files\Java\jre6\bin
-------------------------------------------------------------------------------------
Name: Java Plug-in 1.6.0_13
Publisher: (Not verified) Sun Microsystems, Inc.
Type: ActiveX Control
Version: 1.6.0.13
File date:
Date last accessed: Monday, November 29, 1999, 5:00 PM
Class ID: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
Use count: 0
Block count: 0
File: jp2iexp.dll
Folder: C:\Program Files\Java\jre6\bin
-------------------------------------------------------------------------------------
Thanks.
It’s interesting to see that you appear to have the same Brother printer that I do, or one very similar. I find the software for these Brother All-in-one printers to be rather poor quality. There is an update for the drivers available on the Brother website. I did update my drivers but I’m not sure whether it made the slight glitchiness better or worse, so I don’t recommend it at this point in time. Hopefully they will get something better put together in the future.
Hello,
I was following one of the videos posted on this site and I found an unnamed file running in msconfig.
1. There is no company or file name associated with it at all in the Startup Tab.
2. There are unknown manufacturers in the Services Tab, but the file names are self-explanatory.
3. Would these files under the Services Tabs be associated with the unnamed file under Startup Tab?
Thanks.
That could be; can you post a list of the unknowns and where they are located in msconfig?
Hi dbrisendine,
Startup Tab
There is no file name associated with this Startup Item.
There is no command.
There is the following in location:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Services Tab
Service Essential Manufacturer Status
Java Quick Starter This is blank Unknown Running
Would this be associated with the Java (Not Verified) Sun Microsystems, Inc. Toolbar?
The names of the rest are part of a trial MS Office Suite that came with the computer, I think. The names look familiar from when my brother gave me his computer. The rest are self-explanatory.
Thanks.
Also, I have discovered 9 changes made to Windows as a share music software was downloaded on another profile. I thought I had blocked these kinds of sites, but there are a lot of these sites associated with music download sites that I am not aware of existing. Question: Can I Uninstall IE8 and re-install IE8 to remove these changes?
Thanks again.
Can someone please look at this logfile and provide any answers to some of my queries in this post title?
Thanks