Error Messages in Norton History?

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

Just finish scan and noticed that this bloodhound keeps changing. No its: Bloodhound.MH.68, Bloodhound.MH.192. Bloodhound.MH.122. What are the change in the numbers for can anyone explain this I confused but no something is on ths system.

Bloodhound Detections are created to Detect possible Internet Threats on your computer.  Please read this for more information: http://www.symantec.com/avcenter/reference/heuristc.pdf

I have had that happen several times. The way I understand it in my simpleton way is that the Norton Bloodhound feature takes notice of items that you have that have some similarities to a virus/malware/crap. It detects that and submits that for exam. You clicked yes  to Norton Community watch when you set your NAV up right?

Again in my simpleton way, I undertsand that lets say there is a virus out there that goes

 

abc123xyz and you have a file that is efg463xlk where your file has some part of a string (3x ) that is like the virus/malware or what I like to say Crap that morons try to stick on our comps. So the file goes to Norton for examination. I have had this several times and the notification will disappear, which I take means no harm.

Message Edited by NY1986 on 08-15-2008 04:52 PM
Message Edited by NY1986 on 08-15-2008 05:07 PM

I think I somewhat understand what you are telling me! The virus or whatever has not been analyzed just yet. In the meantime this is driving me crazy. My system is very slow and just to open the information from the previous post took too long and was very slow. Something is most present but cant put my hands on it. I have reformatted because I cant restore it tells me there are no restore points created.My password for my admin account has been changed not once but twice now. That believes me that a password stealer is lurking somewhere. I did a recovery today and it is still crazy as can be. Everytime I do something it seems like the screen is captured, and then the screen is lightly faded out, but then comes back. I also noticed that once one time that \systemvolume\information was on my exclusion list. Can anyone give me advice! System is very very very slow!! Something is changing my passwrds

This is a more serious matter now as you have some sort of Malware on your computer.  This seems to be a New Virus because of all the Bloodhound Submissions.

 

What Version of N.I.S. are you using, e.g. 2008, 2007, e.t.c.?

 

Also, what Version of Windows are you using?

 

If you have any Virus Files - or you think that they are - Submit them to symantec (http://www.symantec.com/business/security_response/submitsamples.jsp).

 

I would suggest that you Update your Virus Definitions via LiveUpdate and then Run a Full System Scan in Safe Mode; before doing this, check and make sure that all boxes are Checked in the Manual Scanning of N.I.S., which can be found under the N.I.S. tab, Settings, N.I.S. Options.

I am running norton antivirus 2008, windows vista. i dont know how to submit files, sorry i am not that advance yet. but if you give me instructions i can follow. also i have a continous blue hour glass that (circle) keeps going at all times. When computer starts up screen goes black once I get the windows logon screen and signon. Nobody seems to believe that nothing is wrong but it is. I check the recent history and the bloodhound keeps changing contstanly.PLEASEEEEEEEEEEEEEEEEEEEEEEEE Help me!!! Somebody believe me that what ever this is it has control over my system. A lot of times I get a message even before I can log on that says: PLEASE WAIT w/blue hour glass circle going around then sometimes I get: “CONFIGURING UPDATES” when no updates have been installed at all. This is crazy!!

Did you Click on the Web Link in my Previous Post?

11 Likes

I ran a scan in safe mode found nothing. Also I notice several things this morning in recent history. I will list as follows:

 

1.  hpassest.exe -behaved suspscioulsy

 

2.hpdiags.exe-made 2 changes to windows  startup

 

3.  unwise.exe-made 2 modifications to system (doesnt say what was made)

 

4. launcher.exe- made  modifications to system

 

5. Bloodhound.MH.150-submitted (also changing daily) area affected file: c:\program files\hp games\fate\fate.exe

 

This is very weird I am an ebay shopper and as soon as entered my personal information into the form for payment my screen got the blue hour glass circle and page flash(like maybe the screen was being captured) and got this message: windows update will restart was not given the option to postpone updates later because that option was grayed out. Also comupter just shutdown and then when started back up  with message: blue hour glass going with message please wait, after that another message configuring updates and then computer shut down again. With these bloodhound(s) this machine is crazy!!

 

Floating Red i am glad you did your research evidently and noticed that this is sumthing new because I cant get anybody else to listen. I research in database and notice that this pattern is not present in your database. New!!! Please tell me how to submitted files. Also btbhost is another problem. Before I restored my system for the 1 million time I ran the combo fix and it found that and I submitted to norton but no one seems to think nothing was wrong with btbhost, which it was a hidden item. My service host is very high and this may be the cause. Please FLOATING RED LETS GET THIS DONE!!! Thanks for your patiences

 

 

I am not able to save. The message I am getting is: an application has attempted to access the hard disk, which cannot be supported. This may cause the application to function incorrectly. Choose “close” to terminate the application. I tried to save it to the computer and then drive c but wouldn’t let me do that. Should I sign on as the admin?

Floating_Red

 

This appears to be a continuation of a previous post which was started on July 16 and comprised a total of 63 posts. 

 

I find it difficult to believe that after a complete reformat (as noted in message #5 of this thread), the computer in question is immediately infected again. I am not sure that "getridofspyware" is clear on the difference between reformat, recovery and restore.

 

Based upon the previous suggestions made in prior forums and the lack of accurate responses by the originating poster, I believe there may be some kind of communication issue.

 

Best of luck.

 

Phil

Again, I think all the IM Bloodhound detections that keep changing are the “just curious” function of NAV2008. Don’t you all think?


NY1986 wrote:
Again, I think all the IM Bloodhound detections that keep changing are the "just curious" function of NAV2008. Don't you all think?

 

That may very well be, but "getridofspyware" is experiencing performance issues with the computer that go beyond that. Notice the problems outlined in message #5.

Message Edited by Phil_D on 08-18-2008 12:42 PM

NY1986 wrote:
Again, I think all the IM Bloodhound detections that keep changing are the "just curious" function of NAV2008. Don't you all think?

 

Obviously with all the Bloodhound Detections are are being sent to Security Response, some new Internet Threat is on getridofspyware computer.

 

I suspect that getridofspyware visited a Fake Web Page on the ebay Web Site that would have been Blocked if the User had N.I.S. installed.

 

Not sure if N.AV has Crimeware Protection but, if it has, please make sure this is on so no more Hackers can get your Personal Information.

 

 

Submitting a file to Symantec Security Response using Scan and Deliver in Norton AntiVirus 2006 or earlier

In most cases you do not have to send an infected file to Symantec. You only need to send an infected file for one of these reasons:

  • Norton AntiVirus finds the same infected files again and again each time the computer is scanned.
  • A Symantec technician asks that you submit the file.
  • You think that a file is infected. You have scanned with the latest virus definitions (Norton AntiVirus is set to scan all files), and nothing was found.

If the file is compressed, such as a .zip file, then you must decompress it before you submit it. Scan and Deliver cannot submit compressed files. For more information, read Cannot submit compressed infected file to Symantec Security Response

               Quarantine and send a suspected file to Security Response    
1 Start Norton AntiVirus.
If you have Norton Internet Security or Norton SystemWorks, then start that program and click Norton AntiVirus.
2 In the left pane, click Reports.
3 In the right pane, click whichever of the following that you see: 
 
  • View Norton Quarantine and Restore
  • View Quarantined Items
  • View Report

 

4 Click Add Item, and then select the file that you want to place in Quarantine.
5 Click Add.
The file appears in the right pane of the Quarantine window.
6 In the right pane, select the file that you want to submit.
7 On the menu bar, click Submit Item.
8 When the Scan and Deliver wizard appears, click Next
9 Click Yes if you are asked, "Would you like to submit this file today?
10 Click Next.
11 In each of the next three panels, fill in the contact information and click Next.
12 Check the information for accuracy in the Review panel, and then click Next.
13 In the Thank You panel, click Finish.
Your virus sample is sent to Symantec Security Response. You will receive the results by e-mail.
I would also suggest trying this: http://security.symantec.com/sscv6/default.asp?productid=ssr&langid=ie&venid=sym

 

If you need help at any time while doing the Steps (above), then Post here.

 

Even although it says "2006 and earlier", it must be the same as current symantec Products are otherwise they would have Updated.

Message Edited by Floating_Red on 08-18-2008 08:39 PM

Sorry for the delay, I used the recovery disk that was sent with my PC to recover system. Installed NortonAntivirus 2008 but do not see the bloodhounds anymore in view history. Does that mean that the bloodhounds are gone. I am running norton antivirus 2008 and did not see how to submit a file to norton. I click reports and the view reports but did not see were to add an item. Sorry but dont think antivirus 2008 has this. My computer is still a little slow after the recovery. I noticed when installing antivirus 2008 that in exceptions there were several things on the list:

1. /System Volume Information

2. *

 


getridofspyware wrote:

Sorry for the delay, I used the recovery disk that was sent with my PC to recover system. Installed NortonAntivirus 2008 but do not see the bloodhounds anymore in view history. Does that mean that the bloodhounds are gone. I am running norton antivirus 2008 and did not see how to submit a file to norton. I click reports and the view reports but did not see were to add an item. Sorry but dont think antivirus 2008 has this. My computer is still a little slow after the recovery. I noticed when installing antivirus 2008 that in exceptions there were several things on the list:

1. /System Volume Information

2. *

 


 

Since you have done Recovery of the system, then whatever was on your computer will be gone and, thus, the Bloodhound Detections will not longer be Activited.

 

In the Exclusions' sub-heading, any files/folders in there will not be Scanned by Auto-Protect/Scanner depending on which boxes they are located; it is fine to delete these so that those files/folders do get Scanned.

Message Edited by Floating_Red on 08-25-2008 01:06 PM