Intrusion Prevention Randomly Turns Off

This is an issue that has been happening on one of my household computers for some time. For some reason N 360's Intrusion Prevention will turn off by itself. There's no particular pattern, it's only happened about 3 or 4 times, but it's still concerning.

 

My main worry is that I have some leftovers from a virus lingering around causing problems. When I installed 360 back in April it detected and removed W32.Silly FDC two times within a four day span. And just a couple of days ago it detected and removed Packed.Generic.234...

 

Computer Specs:

Compaq Presario

Windows Vista - Home Basic (32 bit)

  Service Pack 1

 

Any thoughts/ideas/help would be greatly appreciated it!

 

Just to be sure that there is nothing on your system that should not be there, I would suggest scanning with an additional malware scanner.  Sometimes malware can prevent the proper installation of your security software, so let's see if your system is clean and proceed from there.

 

Please download MalwareBytes' AntiMalware from this LINK . Choose the free version as this does not have a real time scanner that will interfere with Norton products. Install the program and update the definitions.

Boot into Safe Mode:
Start your system and tap the F8 key until the Advanced Options Menu appears. Using the arrow keys, select Safe Mode (no networking or command prompt) and press ENTER.

Once Safe Mode is loaded, run a full scan with MBAM. Have the program fix / delete whatever it finds and make a log file. Please post the log file contents back here for review.

Message Edited by dbrisendine on 06-20-2009 10:21 PM

Run LiveUpdate from Norton program repeatedly until you see the message “No more updates…”. Restart the computer in Safe mode and then run a full system scan using your Norton program (Try to start Norton program in Safe mode and it will prompt you to run Safe mode, click Yes at that time). Check whether it detects any threats and restart back to normal mode when the scan completes.

I had the same problem with intrusion prevention randomly turning off until I downloaded the free Norton 360 version 3 upgrade, haven't had a problem since fingers crossed. Are you using version 3?

 

Also why have you not got windows service pack 2 installed, have you not got windows automatic updates turned on?

yogesh_mohan wrote: Run LiveUpdate from Norton program repeatedly until you see the message "No more updates..". Restart the computer in Safe mode and then run a full system scan using your Norton program (Try to start Norton program in Safe mode and it will prompt you to run Safe mode, click Yes at that time). Check whether it detects any threats and restart back to normal mode when the scan completes.

-----------

 

I ran LiveUpdate right before entering Safe Mode and downloaded/applied new updates. However, when I try to open Norton 360 in Safe Mode it says that 360 does not run in safe mode and that I should install and scan with the Norton Security Scanner (I believe that's what it's called...). So, should I do this instead?

 

I'm currently in the process of scanning with Mbam in safe mode. I'll post the log when it's done scanning...

I am still using Version 2 of N 360. I'll eventually switch to Version 3, especially if this problem doesn't clear up.

 

I do have Automatic Updates turned on, but have not had any prompts to install Service Pack 2 yet. I read somewhere online that it's not included in windows automatic updates quite yet.

Yogesh was refering to v3 of N360; v2 will not run a scan in safe mode.  Did you follow the Malwarebytes scan advice and what did it find, if anything?  If your safe mode scans come up clean, then update to v3 of N360.  There have been several enhancements to the program internally so your problem with IPS will go away.

These are the directions for upgrading to v3.  You will not lose any time on your subscription and there are several internal improvements to the program.  Also, you do not have to remove N360 v3 if you ever do go to SP2 for Vista.

 

1) Copy your Norton key for safe keeping just in case you need it. You should not need this but it is better to have the key on hand than to need it and not have ready access to the key. You can find a copy of your currently installed key in My Documents\Symantec\Norton 360_Key.txt.

2) Download the Norton Removal Tool from this link. Norton Removal Tool Choose the N360 v3 link and download the BUdump.exe to your desktop and the Norton Removal Tool (NRT) to your desktop. Directions are on the link page.

3) Download the latest version of N360 v3 from this link. Reinstall After Removal Choose the Norton N360 link. On the next page you can download the N360 installation software. Premium is the version with 25GB of online storage; Standard has 2 or 3 GB of online storage.

4) Run the BUdump.exe utility if you have any backups that you have run through N360. If you have not done any backup through N360 then you can skip this part.

5) Disconnect from the Internet until your system needs the connection later in the process.

6) Go to START > N360 > Uninstall and let N360 uninstall itself. It will want to reboot the machine. Let it.

7) During the booting of your system, go to Safe Mode by tapping the F8 key until the Advanced Options menu is shown. Choose the Safe Mode option (no network or command prompt).

8) In Safe Mode, run the NRT tool. When the tool is finished, click on the Reboot to restart your system.

9) Let Windows boot into normal mode now.

10) Install N360 by double clicking the file you downloaded and saved to your desktop in step 3.

11) When the installation asks for your key or says activating your product, reconnect to the internet then (plug your cable in or turn on the wireless card). [Note: The installation may not ask for your key and activate by using the previous key on the system. Your system will still need to connect to the internet at this point so updated definitions can be downloaded.]

12) Run the Live Update process manually until Live Update reports that there are no more updates to download, N360 is fully up to date.

13) Reboot your system now to insure that any components updated during step 12 are loaded properly.

14) See if your error is fixed now.

Report back here with how this works for you.

The scan with Malwarebytes came up clean. Here's the log:

 

Malwarebytes' Anti-Malware 1.38
Database version: 2327
Windows 6.0.6001 Service Pack 1

6/23/2009 5:33:58 PM
mbam-log-2009-06-23 (17-33-58).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 212915
Time elapsed: 26 minute(s), 0 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

 

I'll try upgrading to N 360 v3 as soon as a I can - probably within the next couple of days. Hopefully that will solve this intermittent-odd problem.

Please let us know how this goes for you.

I believe service pack 2 for windows vista was released around 27th or 28th of May.

 

You may already have done this but just in case:

 

It may be that they have downloaded and are  ready for install. Click on Windows icon in bottom left of screen, just above this and to the right you will see a padlock icon, to the left of this icon will be an circle icon with a line through the middle. If it has an orange shield with an exclamation mark next to it click on it, as these are updates waiting to be installed, if not go to programs menu and click on windows update and do a manual install of all important updates.

dbrisendine,

 

If I have N 360 v3 on CD can I use that to do the install, instead of the download? Also, is the method you posted the best way to go about installing the newer version of the 360? Can you also install the new version over the older version, i.e. v3 will uninstall v2 during v3's installation...or can that lead to problems?

 

I'm only asking because I have another computer in my house with N 360 v2 that I want to upgrade and was wondering if the same steps would apply (it does not have the same problem as the other computer).

You can use the CD of v3 to do the installs from.  There has not been any other changes to N360 (build wise that is) since v3 was released.  It will install over the previous versions; the installation does take longer than the fast install on a clean system (one without a previous version).

So, the reason for the other removal process is just to make the installation process faster? Or is there any other benefit to doing a "clean" install?

 

Would you still recommend the removal process listed in prior posts for the machine I'm having trouble with, or can I do the simple, lazy install from the cd? Just curious... =)

Depends on what was there before N360 v2.  N360 v3 is the first N360 to install over top of the previous version.  If one had some other older Norton software it is recommended to use the NRT due to the various install methods used in the past. 

 

The 2009 products use a Symantec install engine not a MS one; that is the reason for the speed. 

 

But cleaning out the older installations can be tricky if the user has modified the standard installation; for example, I have seen the uninstall process leave the Live Update service behind because the use updated it outside of the installation program.

Tuplease download malware bytes anti malware from this link http//www.malwarebytes.org/mbam.php Choose the free version as this does not have a real time scanner that will interfere with Norton products. Install the program and update the definitions.rns Off