Hi,
I've latest version of NIS, up-to-date. After each threat removal (whether it is a successful one or failure) all my hidden files including protected system files are visible. I should manually change its settings in Vie tab of File and Folder options in Win 7 HP. Is it a bug or can I get a solution, please.
Note:The file and folder attributes are not changed.
After each threat removal (whether it is a successful one or failure)
Are you testing malware on your machine? What do you do if you have a failure?
"Win 7 HP. Is it a bug or can I get a solution, please."
If testing malware to some degree the solution would be simple
Answer : Don't play with malware
Ever thought that the change could be a side effect of the malware?? Like a lot of things that happen with malware it depends on the family and variant, changes can or do happen to Windows and Windows settings that means that after the break (and that may include the moving of items) Other changes appear that were hiding when the infection was in full flight.
That is when the repairs or resetting of policies, Windows and user settings occurs.
In the past some malware does change settings and what happens is when the user manually changes a setting back but the malware is still running, the infection then changes the setting back to the way the malware wants it. Basically telling the user no you don't.
There can be a lot of changes not seen until the malware is broken................... So if what you are doing is running the same piece of malware again, well the same settings is going to change again.
Added: just a thought, even if it is Norton during the removal process for a group(s) of malware (family / sub family) most users after the clean up and full check of the system if on a malware removal board, would not mind as one of the last steps manually changing the hide system files setting back to what they want.
Most are happy doing simple steps like that as they are just happy to have the infection cleaned.
Quads
To F4E,
F4E wrote:Hi,Nikhil_CV. Have you ticked Control Panel/Folder Options and checked Don't show hidden files, folders and drives, and also Hide protected system files under the View tab ?
Does a Norton fix STILL show them, even after a repair ?
Have you tried running Autofix, and also re-booting ?
Have you tried running Autofix, and also re-booting ?
Have you.....: All settings were intact (I mean Checked) before reset, but after reset it was altered automatically.
Does.....: Show what? If its malware I didn't find it. In logs it says Qurantined.
Have.....: Yes. But since already qurantined, there was no messages to bother. Now I'm doing a complete system scan to make sure everything is fine.
Quads wrote:"Win 7 HP. Is it a bug or can I get a solution, please."
If testing malware to some degree the solution would be simple
Answer : Don't play with malware
Ever thought that the change could be a side effect of the malware?? Like a lot of things that happen with malware it depends on the family and variant, changes can or do happen to Windows and Windows settings that means that after the break (and that may include the moving of items) Other changes appear that were hiding when the infection was in full flight.
That is when the repairs or resetting of policies, Windows and user settings occurs.
In the past some malware does change settings and what happens is when the user manually changes a setting back but the malware is still running, the infection then changes the setting back to the way the malware wants it. Basically telling the user no you don't.
There can be a lot of changes not seen until the malware is broken................... So if what you are doing is running the same piece of malware again, well the same settings is going to change again.
Added: just a thought, even if it is Norton during the removal process for a group(s) of malware (family / sub family) most users after the clean up and full check of the system if on a malware removal board, would not mind as one of the last steps manually changing the hide system files setting back to what they want.
Most are happy doing simple steps like that as they are just happy to have the infection cleaned.
Quads
Thanks for your advice. I'm currently doing a FULL SCAN to make sure everything is right.
Hi,
I've latest version of NIS, up-to-date. After each threat removal (whether it is a successful one or failure) all my hidden files including protected system files are visible. I should manually change its settings in Vie tab of File and Folder options in Win 7 HP. Is it a bug or can I get a solution, please.
Note:The file and folder attributes are not changed.
To delphinium,
delphinium wrote:After each threat removal (whether it is a successful one or failure)
Are you testing malware on your machine? What do you do if you have a failure?
I'm not testing any malware on my personel laptop anyway. Failure occurs if the .iso or .img file is infected, else I insert an infected CD/DVD ROM.Rarely if there is a disconnecton of storage device like pendrive or ext. HD due to cable probs.
These are detection details from security history. Please find text file attachments(2).
I'm no expert, and Quads will correct me if I am wrong, but from your first attachment it looks like the first two registry entries fixed pertain to hidden files. It looks like the malware you got changes those settings, not Norton.
It doesn't really matter, (just see my answer above) if it is Malware or Norton that has set the keys to 1.
This user also causes their own problems by having more than one AV / Firewall etc.
Quads
Nikhil_CV wrote:
These are detection details from security history. Please find text file attachments(2).
Both of the files in your attachments show a 'Launched' status of 'No'.
If your J Drive is your CD/DVD ROM drive and you are manually scanning the disc for threats, then yes, it's likely that you are encountering a known issue.
If Norton encounters a threat on a CD/DVD ROM disc, then cleanup will fail with a Write Protected Volume/please eject disc message. Normally, ejecting the disc and clicking re-scan will resolve the issue. Under some circumstances however, Norton thinks that the system is actually infected as a result of the scan and then runs a scripted cleanup process for this non-existent infection, thus creating a series of phantom file/registry key items in the Quarantine.
Please advise if your J Drive is your CD/DVD ROM drive and if you are manually scanning the disc for threats.
Thanks
elsewhere wrote:Both of the files in your attachments show a 'Launched' status of 'No'.
If your J Drive is your CD/DVD ROM drive and you are manually scanning the disc for threats, then yes, it's likely that you are encountering a known issue.
If Norton encounters a threat on a CD/DVD ROM disc, then cleanup will fail with a Write Protected Volume/please eject disc message. Normally, ejecting the disc and clicking re-scan will resolve the issue. Under some circumstances however, Norton thinks that the system is actually infected as a result of the scan and then runs a scripted cleanup process for this non-existent infection, thus creating a series of phantom file/registry key items in the Quarantine.
Please advise if your J Drive is your CD/DVD ROM drive and if you are manually scanning the disc for threats.
Thanks
Thanks for info. Actually I initiated the scan on a removable HDD, before the scan was completed i had to remove the drive. I think those registry changes made the probs.