Ok i have just been using my laptop i have 1 account on it which is admin and i had disabled all the remote services and used my 3 dongle to connect to the internet, next thing i know the remote desktop services is running and connected, even though i had disabled them, i have to enable the rasman to get a connection with the dongle otherwise it wont connect. It can only be the guy next door working in security on his laptop as i am on an industrial park and nobody else except him is anywhere near 150 meters off me. What i dont understand is how did the norton smart firewall allow this person to get on my pc and alter these settings. I have just googled how to disable the remote desktop services by registry to make sure they are off but after every restart it is enabled and set to automatic.
Also there are new firewall rules they are:-
Host process for windows services
Local security authority process
Services and controller app
Windows start up application
Also my 3 internet connection
All had rules that were custom internet access rules, they all allowed direction:inbound and outbound computer. Any communications :specific, protocol TCP and UDP.
I think the reason maybe down to the fact that the 3 connection did not have any security on the connection and that allowed them access but i did not acknowledge any access, but it is default settings
Basically how the hell do i stop all this from happening please lol.
I just stopped all the new connections for the host etc to disabled and now they have just added new rules for themselves. I set it up to monitor the settings. Basically somethings going on and i dont know what to do about it
I don't know about anyone else but you are talking an unknown foreign language so far as I am concerned!
<< ...3 dongle internet connection .... >> And yes I do know what a dongle is .....
Your reference to your neighbor changing your settings sounds as if you have an open wireless connection or are using his.
How about some basic information:
To get you the best advice, would you give us some more information about your system:
What version of Windows are you using including Service Packs and whether 32 bit or 64 bit as well as the Name and Version ID of the Norton product that you are using -- Help or Support / About is where that is, in the format of nn.nn.nn.nnn where n is a number.
If you have the COMCAST version of Norton 360 / Security Suite and not the normal commercial version please be sure to tell us.
If you get any error messages please give the exact wording of them as well as any other background that could be helpful.
Please also say what internet browser you are using -- name and version number ...
Sorry for not giving the right info, ok windows 7 64 bit service pack 1, norton 360 v5.2.0.13, it is the normal version of norton 360 and the browser i am using is internet explorer 9
i dont have any error messages though hugh getting allot of unauthorized access blocks from C:\Windows\System32\Conhost.exe now i have blocked all traffic, it is trying to access C:\Programfiles(x86)\Norton360\Engine\5.2.0.13\cltlmh.exe actor PID is 2864 Target PID 648 aslo got Actor PID 200 Target PID 2448
Ok Hugh i use virgin media cable i have set it up for WPA2 AES PSK instead of WPA Auto, when i got home i did a fresh install of loading windows from the disk at start up then custom install and deleted hard drive contents changed my password, i then installed norton disabled all the remote services with only an ethernet connection of which virgin tell me all i have to do is just insert the cable and thats it no log on settings using a dynamic ip connection. Before i installed norton i went onto the remote tab on system properties and disabled allow my computer to be controlled remotely and remote assistance connections, i then locked the windows firewall while i installed norton did remote services disabled as i said earlier then restarted then i did cmd, run as admin, net user administrator/active:no to disable built in admin and installed EMET and set to maximum security settings then restarted. Then i updated norton live update ran a diagnostic of pc says all was green apart from drivers which needed update and setup network on norton as a restricted network on a home connection, did the backup settings to the norton backup of 2gb then restarted then checked my services and find remote desktop services is set to automatic and running again. I wondered if remote desktop service was required for the backup to the norton server but i doubt it. Im not even going to consider using the 3 dongle again. I disabled the service and stopped it running restarted and sure enough remote desktop is running again
Is there any more information you need Hugh, i even joined the digital home support and watched what he did to setup the pc and he did no different to what i did appart from he did not disable the remote system tabs.
i disabled pin setup connection on the router too which is the virgin media super hub so basically the only way of connecting is by the passkey, ethernet or pressing the button for wps
Hugh if there was a list of the windows services that should be running when norton 360 is running as it should that would be good to check against but i cant seem to find it on a google search could make that post a sticky too
Ok i have just been using my laptop i have 1 account on it which is admin and i had disabled all the remote services and used my 3 dongle to connect to the internet, next thing i know the remote desktop services is running and connected, even though i had disabled them, i have to enable the rasman to get a connection with the dongle otherwise it wont connect. It can only be the guy next door working in security on his laptop as i am on an industrial park and nobody else except him is anywhere near 150 meters off me. What i dont understand is how did the norton smart firewall allow this person to get on my pc and alter these settings. I have just googled how to disable the remote desktop services by registry to make sure they are off but after every restart it is enabled and set to automatic.
Also there are new firewall rules they are:-
Host process for windows services
Local security authority process
Services and controller app
Windows start up application
Also my 3 internet connection
All had rules that were custom internet access rules, they all allowed direction:inbound and outbound computer. Any communications :specific, protocol TCP and UDP.
I think the reason maybe down to the fact that the 3 connection did not have any security on the connection and that allowed them access but i did not acknowledge any access, but it is default settings
Basically how the hell do i stop all this from happening please lol.
I just stopped all the new connections for the host etc to disabled and now they have just added new rules for themselves. I set it up to monitor the settings. Basically somethings going on and i dont know what to do about it
Since you now explain that you are using Virgin Media Cable I am able to deduce that you are probably located in the UK !!!
And by Googling on << using the 3 dongle >> from your message I am able to find out that 3 Dongle is a device/system for accessing the internet and that you are certainly not alone in having problems.
<< ... the three dongle which delivers broadband via the mobile telephone network. >>
Perhaps you don't realize that we users here are located all round the world and to get help you have to communicate to people with different backgrounds.
Now from your latest message #8 it seems that you have dropped the 3 Dongle and are using "normal cable" internet connection; that you have completely clean resinstalled Windows and Norton and set it up.
So are you now seeing what you should in terms of connecting to the internet and the operation of N 360 for security?
I can't help you on stuff like Remote Access but here's a link to an article on it under Windows 7 and looking at the screenshots there is one screen where you check to allow it -- is this checked or not?
Nor do I follow what you keep saying about your neighbor .... do you know this from him or suspect it or what?
Yes Hugh i am in the uk i was using my 3 dongle at work and have virgin cable at home. i think the problem may be that i am notsetting it up properly, although from what i have been told once you have gone through the setup procedure on a fresh install that windows ask you to do there is not much else to do. I am using home premium of windows 7 which says that i can only connect to another remote computer and not host, so i dont understand that i have not setup a remote desktop connection and i dont understand why norton is allowing a remote desktop service to run when i have not set 1 up. So no i dont think i am seeing what i want from norton security and a secure connection to the internet, because if remote desktop service is running that means that another computer is connected to me does it not especially if it is also running to. I dont see a link to the remote desktop ss either hugh sorry. Basically i am saying that it seems like my firewall is not stopping people from seeing what i am doing on my computer. But i set my network connection as restricted so does that mean that i am remotely connecting to a service that norton 360 provides to protect my computer from people accessing it?
All i did with norton when i installed it is run live update ran the diagnostic to make sure the network connection is green and the network map and set the network conn as restricted access and set it as restricted in the security logs too. Is there anymore i need to do? Oh i also setup a password to change the firewall settings too. Are there any links you could provide towards setting up 360 correctly please.
Also does norton 360 use the remote desktop connection service?
All i see on the network security map is my pc and a switch/router it says wired network secure, I cant see my computer using remote desktop services to connect to the switch/router that just silly
can norton firewall not be configured to stop remote desktop services from starting and block all access to it as this is a service i will never want to use ever, if i want to transfer anything i will do so by a external hard drive
While something may have changed of which I was not aware, Norton, as far as I know, requires Remote Desktop Services (formerly called Terminal Services) to be running. If you have a properly secured WPA-2 encrypted wireless network, it would be virtually impossible for anyone else to access it. Similarly, if you have the Norton Security Map network trust level set to "Protected" or "Restricted," even other devices that are on the network cannot access your computer. It would be very unlikely in these situations that anyone could be eavesdropping on your connections or accessing your PC. I would not jump to those conclusions based on what is happening with Remote Desktop Services.
Thank you Jive, that was the answer i am looking for, as long as norton requires that service to be running and it is controling it then like you say i have nothing to worry about :). I did keep on getting security notifications of services getting an unauthorised access or data protection and it was blocked think it was C:\Windows\System32\services and it was trying to access a norton file but then again that would just be the firewall just doing its job and keeping me safe
I did keep on getting security notifications of services getting an unauthorised access or data protection and it was blocked think it was C:\Windows\System32\services and it was trying to access a norton file but then again that would just be the firewall just doing its job and keeping me safe
Actually, that would be Norton Product Tamper Protection, rather than the firewall. It is just keeping outside agents from accessing Norton files and processes, and has no relevance to what is happening on your network or anything trying to access your computer. It is strictly a Norton self-protection component.