Norton 360 blocks internet connection

Norton Security | Norton Internet Security
1

Hello.

 

I posted about this problem originally a few weeks ago, but have gotten little to no help. Here is a link to my orignal thread:

 

Here is a run own, again of my problem.  I bought Norton 360 about a month ago. The program works fine for about 3 or 4 shutdowns and start-ups.  After the 3rd or fourth start up with Norton 360, I cannot access my internet at all--not with any program including Norton 360.  I can always tell when this will happen because just before the Windows sign-in screen appears I get a blue screen with "Windows XP" in the upper-right hand corner, and just below that it say "Please wait.....".   The only way for me to access the internet again is to uninstall Norton 360.  I've now had to uninstall and reinstall Norton 360 SEVEN times in only the first month of owning this.  I would very much appreciate help.  I've tried emailing Norton and this forum.  So far I've had little help.  I never received a reply of my email, and if you read my first thread on this forum, you'll see that a few users replied to my initial post and when I replied to their posts asking for more guidance I never heard from them again.   I am on the verge of sending the program back and asking for a refund.  I have Windows XP with the latest SP.  Today, when I couldn't access the internet once again, I looked at the firewall history.  It said:

 

Rule "Default Block Microsoft Windows 2000 SMB" blocked communication.  Local address: All local network adapters (Port (445)).  Process name is "System".

And it noted that my firewall definitions had been updated.  

Again, I would very much appreciate help.  I have a lot of work to do on my computer, and dealing with this has taken away a lot of my time. 

 

Thank you.

 

 


 

2

Hello,

 

Yes, I've tried restarting many times and the problem persists.   Last time I even tried restarting in safe mode with networking and the problem persisted.  

 

I checked the event viewer, and there are many events posted under system and application.  Those that seem to deal with Norton say: "Symantec Antivirus minifilter successfully loaded".   "The Symantec Real time Storage Protection service was successfully sent a start control". 

 

There were no error messages just after the initial regular start-up, but the following error messages appeared after I had restarted in Safe Mode (so they may have something to do with the computer being in safe-mode):

 

"Failed to connect to server. Error: 0x8007043C"

 

The description for Event ID ( 20 ) in Source ( Google Update ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Network Request Error.
Error: 0x80040801. Http status code: 0.
Url=https://tools.google.com/service/update2
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=FireFox, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0.

 

DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

 

DCOM got error "This service cannot be started in Safe Mode " attempting to start the service StiSvc with arguments "" in order to run the server:
{A1F4E726-8CF1-11D1-BF92-0060081ED811}

 

The following boot-start or system-start driver(s) failed to load:
BHDrvx86
ccHP
eeCtrl
ElbyCDIO
Fips
IDSxpx86
intelppm
SRTSPX
SYMTDI

 

DCOM got error "This service cannot be started in Safe Mode " attempting to start the service wuauserv with arguments "" in order to run the server:
{E60687F7-01A1-40AA-86AC-DB1CBF673334}

 

DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

 

The following boot-start or system-start driver(s) failed to load:
eeCtrl
ElbyCDIO
Fips
intelppm

 

DCOM got error "This service cannot be started in Safe Mode " attempting to start the service MSIServer with arguments "" in order to run the server:
{000C101C-0000-0000-C000-000000000046}

 

DCOM got error "This service cannot be started in Safe Mode " attempting to start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

 

 

 

 

3

In the event viewer are there any other, non-Norton, errors (red X) at all?

 

Also, the next time the issue happens you can run Windows Network Diagnostics (Control Panel > Network and Internet Connections >, listed under "Troubleshooters" in the left pane) to see if it can pinpoint the problem.

4

The only errors (red x) are those listed above.  As I said above, they only occured after I restarted in safe mode.  The event viewer did not report any errors when I intially started up in the normal mode and couldn’t connect to the internet. 

5

Hi Keneda

 

Perhaps there is some malware on your computer which is blocking the start up of some of your drivers which are part of Norton's. I don't know the purpose of these drivers, but if something is blocking them, they may have something to do with you connecting to the internet. This may not be the problem, but just to find out if something isn't lurking in your computer.Just to rule out any rootkits, please run this.

 

Please run a SysProt log for us so we can check your system for the rootkit .sys name. You will need to disable Norton auto-protect while you run the scan.

Once it is downloaded to your desktop, right click on the SysProt icon, go to properties, and click unblock and apply. (if available)

Choose log, check all the boxes except show hidden objects only and scan.

You will be able to post the log here using the "add attachments" link just below the orange post button.

http://homepages.slingshot.co.nz/~crutches/SysProt

 

After running the scan, Please do not attempt to clean anything that the log may show by yourself.

6

Here it is.

 

Thank you in advance.

7

Hello.

 

I posted about this problem originally a few weeks ago, but have gotten little to no help. Here is a link to my orignal thread:

 

Here is a run own, again of my problem.  I bought Norton 360 about a month ago. The program works fine for about 3 or 4 shutdowns and start-ups.  After the 3rd or fourth start up with Norton 360, I cannot access my internet at all--not with any program including Norton 360.  I can always tell when this will happen because just before the Windows sign-in screen appears I get a blue screen with "Windows XP" in the upper-right hand corner, and just below that it say "Please wait.....".   The only way for me to access the internet again is to uninstall Norton 360.  I've now had to uninstall and reinstall Norton 360 SEVEN times in only the first month of owning this.  I would very much appreciate help.  I've tried emailing Norton and this forum.  So far I've had little help.  I never received a reply of my email, and if you read my first thread on this forum, you'll see that a few users replied to my initial post and when I replied to their posts asking for more guidance I never heard from them again.   I am on the verge of sending the program back and asking for a refund.  I have Windows XP with the latest SP.  Today, when I couldn't access the internet once again, I looked at the firewall history.  It said:

 

Rule "Default Block Microsoft Windows 2000 SMB" blocked communication.  Local address: All local network adapters (Port (445)).  Process name is "System".

And it noted that my firewall definitions had been updated.  

Again, I would very much appreciate help.  I have a lot of work to do on my computer, and dealing with this has taken away a lot of my time. 

 

Thank you.

 

 


 

8

Hi

 

I asked someone to check out the log and he said he didn't see any rootkit activity.

9

Hi Keneda76,

 

Try resetting the Firewall settings. You can find the option to reset in Advanced Settings for Smart Firewall. If the problem persists, you can try to flush your DNS and resetting the winsock. (I am not sure whether you have tried this already)

1. Click Start button, then click All Programs > Accessories > Run, type  ipconfig /flushdns and click OK.

2. Click Start button, then click All Programs > Accessories > Run, type  cmd and click OK.

3. in the command prompt, type the following and press Enter after each line:

netsh int ip reset resetlog.txt [Enter]
netsh winsock reset [Enter]

exit [Enter]

 

Also, let us know whether you are able to connect to the Internet when you boot into Safe Mode with Networking.

 

Yogesh