Thanks to everyone for their posts and advice. I started having the 3039,1 error after I had to reinstall NIS 2009. My problem began when I inadvertently downloaded a virus via an aquaplay program. NIS 2009 caught the virus: W32 Tidserv worm, however I then could not connect to the internet on the affected PC. When contacting support, they worked through deinstalling NIS 2009 with Norton Removal Tool and deinstalling with Windows Add/Remove programs. This fixed my internet connectivity, however, I then started to get the 3039,1 error message. Also, when I tried to run a full system scan, NIS 2009 would only scan about 5,000 files, when I have over 250,000 on the PC.
Back to tech support, and the tech tried to deinstall NIS 2009 again with NRT and also manually removed all folders and registry entries. Reinstalled NIS 2009 vs. 16.2.0.7, but continued to get the 3039,1 error and full scan would not complete.
Based in feedback from this forum, I downloaded and run malwarebytes anti-malware. The full scan revealed the following:
Malwarebytes' Anti-Malware 1.33
Database version: 1678
Windows 5.1.2600 Service Pack 3
1/22/2009 12:14:43 PM
mbam-log-2009-01-22 (12-14-43).txt
Scan type: Full Scan (C:\|F:\|G:\|H:\|)
Objects scanned: 256333
Time elapsed: 1 hour(s), 44 minute(s), 49 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 5
Folders Infected: 0
Files Infected: 3
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.34,85.255.112.63 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.34,85.255.112.63 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{054c1cb8-aff5-4b46-bc2d-f3cd4ed41ca9}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.34,85.255.112.63 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.34,85.255.112.63 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.34,85.255.112.63 -> Quarantined and deleted successfully.
Folders Infected:
(No malicious items detected)
Files Infected:
C:\WINDOWS\system32\gaopdxblamtckc.dll (Trojan.DNSChanger) -> Quarantined and deleted successfully.
H:\Eden Docs\Docs\Downloads\Realtek\nforce3arealtekaudio_3393.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\gaopdxrimeyqvx.sys (Trojan.Agent) -> Quarantined and deleted successfully.
After running malwarebytes and removing the infected files and registry entry, I was able to run a full scan with NIS 2009. Also, I no longer see the 3039,1 error message.
The affected PC is running Windows XP, SP3.
I have 2 other PC's, one with Windows XP SP3 and one with Vista Premium Home edition, both running NIS 2009 without issue.
I would suggest running malwarebytes scan with NIS 2009 installed. If any viruses/threats are found, clean them and then reboot. Try running a NIS 2009 full scan; if it completes successfully, the problem may be resolved.