Norton Internet Security 2009 blocking Thunderbird POP3 and SMTP connection

This is essentially the same problem as that described in the now read-only thread Problems with thunderbird-mail started after installing NIS2009.  I don't know why the thread has been closed, because I saw no solution posted within it; only somecontinuing promises that the problem was known and that a fix was forthcoming.

 

Be that as it may, I have been having this problem for at least a month.  I originally installed  NIS 2009 over my expired NIS 2008.  No problems for at least 2-3 months.  But after that, I began having the problem intermittently, receiving "Could not connect to server xxxxxxx; the connection was refused"  Originally suspecting the problem lay within the latest release of Thunderbird, I uninstalled it and went back one version, which appeared to solve the problem (for a while at least).  This scenario was repeated once or twice more; operable for a while, then failure, corrected by un-installing / re-installing Thunderbird.

 

Now, however, I have a hard failure.  The only way to get a connection is to turn off e-mail scanning.  The minute I disable it, I can do a Get Mail and the connection is made and mail from the server is downloaded.  Turn email scanning back on, do a get mail, and receive  "Could not connect to server xxxxxxx; the connection was refused".  Note that turning email scanning off is the only change that allows the connection to be made.  Disable Smart Firewall, and Disable Anti-Virus Auto-Protect have absolutely no effect.

 

Seems to me this problem has gone on long enough for a fix to be available.

XP SP3, 4 Gb, Thunderbird 2.0.0.18 through 2.0.0.21,  NIS 2009 16.5.0.135

 

How 'bout a little help, guys?

 

david

 

Message Edited by Qbee37 on 04-30-2009 09:51 PM

Qbee37:

 

I am also on XP sp3, Home version.  Thunderbird is my default email, and I have non of those problems. I am running the same version.  Have you allowed Thunderbird in your program Control? Are you using the default version or have you customized it?  Have you looked in the error console under tools to see what kind of errors you have?

 

Also check in history in Norton to see if any specific block of Tbird has occurred. 

No changes to configuration.  It used to work, now it doesn't

Examination of system event log shows no errors.

Examination of  Security History: Firewalls shows no errors

No NIS 2009 customizations (OK, Anti-Spam is OFF, but that's it)

 

Hello Qbee37,

 

As I understand that you were able to use Thunderbird with Norton Internet Security 2009 for couple of months and now you are having this issue. Also I understand that you are able to Get Email when you Turn off Email Scanning feature. 

 

Can you try Unchecking "Scan Incoming Email Messages" alone and try clicking on Get Email option in Thunderbird?

 

Also do u remember of doing any updates to your computer or installing any software in your computer which could have caused this issue?

 

Thanks,

Hariram M 

 

Sorry, I actually meant customizations in Tbird, such as the themes or extensions which might have become out-dated or causing a conflict.

 

Rather than the system event log, look in the Thunderbird error console which is under tools in your menu bar at the top.

 

edit for clarity

Message Edited by delphinium on 04-30-2009 11:29 PM

 

 

David:-,

I'm using XP Pro SP3 and using the same version of NIS 2009 that you are.

I'm using Thunderbird version 2.0.0.21 and never had a problem with the NIS 2009 setup and e mail. I use the  POP3 and SMTP as well.

I wonder if perhaps the NIS 2009 on top of the 2008 model has caused sort of a problem (versus a clean install of NIS 2009)?

 

Take Care

 

 

In answer to harimukund  http://community.norton.com/Norton/board/message?board.id=nis_feedback&view=by_date_ascending&message.id=49353#M49353

 

Deselecting "Scan Incoming Email Messages" alone will not do it; must completely disable email scanning

No new software added (other than Windows hot fixes that are released each month)

 

 

 

In answer to  delphinium   http://community.norton.com/Norton/board/message?board.id=nis_feedback&view=by_date_ascending&message.id=49354#M49354

 

No customizations to Thunderbird  - plain vanilla

Thunderbird Error console is empty (a few Warnings for font issues on incoming messages)

 

 

and, in answer to  itsme  http://community.norton.com/Norton/board/message?board.id=nis_feedback&view=by_date_ascending&message.id=49363#M49363

 

 When I say"on top of NIS 2008", I simply mean that NIS 2008 had been my previous package.  When it expired, I discovered it was considerably cheaper to buy 2009 from Costco than to renew 2008.  2008 was un-installed followed by install of 2009

 

 

Qbee37, are you getting any other ‘symptoms’ such as crashes reported? After a failed connection, if you open task manager, select the processes tab and the Show processes from all users check box and then click on Image Name to sort by name, how many instances of ccSvcHst.exe do you see in the list?

No crashes.

Rebooted box.

Task Manager before starting Thunderbird:

Task Manager after reboot.jpg

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Task manager after starting Thunderbird

 Task Manager after Thunderbird started.jpg

 

 

Note:  Norton System Works 2005, Partition Magic 8.0, and PC Anywhere 11.5.3 also installed on box.

Qbee37, the task manager looks good. I wonder if you were to remove Norton SystemWorks if the problem would go away. Do you have NSW installed without the anti-virus portion?

Correct, NSW without Antivirus.

I'd been considering removing it and running only from CD when necessary.  Guess I'll go ahead and do that, although I don't have high hopes. Its been there all along, and the NIS 2009 problem did not occur on install, but a couple of months later. 

 

Update:

NSW 2005 un-installed, box re-booted.  Still unable to Get Mail with Thunderbird without disabling NIS 2009 Email Scanning. 

Message Edited by Qbee37 on 05-01-2009 11:46 AM

So, with NSW uninstalled, do you only have two copies of ccSvcHst running?

I hate to make things more complicated, but your NSW is so old I doubt that NIS even installed in perfect compatibility with it.  Consider the possibility of using the Norton Removal Tool to clean up all (or most) Norton debris on the computer and then reinstalling NIS 2009.  I use the current basic version of NSW and it integrates perfectly with NIS 2009; I’d recommend it (after everything is fixed, of course).

In answer to reese_anschultz

No, still have 4.

 

In answer to mijcar

NSW 2005 and NIS 2009 appeared to play nicely together, never noticed any problems.

Yes, I know Norton Removal Tool is out there, but I'm not exactly enthralled with the idea of having to un-install and re0install everything.  That's pretty much a last resort in my book.

 

But, let's not lose sight of the original issues:

  1. NIS 2009 installed in late December 2008.
  2. Thunderbird has been on box for at least two years.
  3. No problems until late March - early April time frame
  4. Same (or at least incredibly similar) problem reported by other users of NIS 2009 / Thunderbird as far back as late summer 2008
  5. Earlier thread dealing with issue promised fixes that were apparently never provided, thread then became read-only

 

Color me mystified and annoyed.

Qbee37,

 

The fact that you still have four instances of ccSvcHst running after uninstalling NSW indicates that something is wrong. With only NIS installed, you should only have two instances running. You may have to use the removal tool to clean things up.

Gotta bite the bullet, huh?  Oh well, that's a task for tomorrow afternoon I suppose.  I'll provide an update when done.

 

david

Just a word of caution about NSW.  I really like it and use WinDoctor all the time, however I never, ever, ever, ever let it make the decision about fixes.  If NSW has a weakness, it is in its recommended fixes.

 

One example:  NSW WinDoctor discovers that an application invokes setup.exe at C:\program files\somewhere and doesn't find setup.exe at that location.  It then searches for all other incidents of setup.exe on your computer and provides a list of recommendations something like the following:

Replace with c:\program files\gloopgloop\setup.exe

...

Replace with c:\msoffice2007\setup.exe

...

Replace with c:\documents and settings\all users\downloads\adobe\acrobat\setup.exe

and so on.

 

Can you imagine the damage that might result by linking an invoke instruction to the wrong setup file?!

 

Auuggh!

 

My choice is always to delete the reference.  Since I use WinDoctor as a wellness tool rather than a treatment, that means my computer is already running okay.  A missing referent is not causing any noticeable symptoms.  Deleting the reference should not cause a problem.  Of course, after making such a deletion, I pay extra special attention to the behavior of my computer for the next several days.  If I were to have any misfunctioning, I would restore the deleted entries and see it the behavior is fixed.

 

In particular, MS seems extra careless with their Framework security updates.  I notice after a patching that WinDoctor discovers a number of broken links in the original Framework files.  WinDoctor's assumption seems to be that these OLDER links should now point to the NEWER files.  My assumption is that MS, for security reasons, no longer wants those references at all, but with their usual hasty coding forgot to delete those entries from the registry.  I go for the deletion route.  Has worked every time.


So, other than just handing on good advice and rambling, is there any point to all this.

 

Yes, there is.  It has occurred to me that you like myself might be a dedicated WinDoctor user; but unlike myself you might be a bit more trusting of WinDoctor's recommendations.  Since there is an overlap between NSW and NIS in the area of AV and a seeming overlap in the area of Live Update, it is not impossible that WinDoctor identified some links that were broken by NIS in its installation (it kills Live Update for NSW and removes all AV components from NSW, to put it rather simply), and that WinDoctor might have tried to restore some of these broken links by pointing in the wrong direction.  Given the age of your NSW, this is not at all unlikely.  The things that could have happened:

1.  wrong program components invoked.

2.  incomplete NSW removal.

3.  incorrect Live Update behavior on the part of NSW.

 

All of this is hypothetical, but apparantly possible if you used WinDoctor.  Additionally, they might even be possible simply from the installation of NIS 2009 over NIS 2008 while NSW 2005 was present.

 

For me, this merely reinforces what you already decided.  Go bite that bullet.

 

And, if you have already browsed these boards, you may have noticed that there is a ritual we recommend with regard to using the removal tool.

 

Make sure you have a copy of your activation code and your installation programs for all Norton/Symantec products.

Run the Removal Tool.

Reboot.

Run the Removal Tool again.

Reboot.

Run a file and folder search on your main drive for incidents of Norton and/or Symantec folders and delete those.  (Yes, the removal tool doesn't always remove everything).

Reboot.

[And when I do this, I run my NSW CD WinDoctor and look for any remaining Norton/Symantec links now identified as broken and remove them, too.  However, be aware that once removed, these cannot be undone as running WinDoctor from a disk does not save original registry entries.  If you do this and want to be safer, you should backup your registry using RegEdit first.]

 

Good luck.

 

Message Edited by mijcar on 05-01-2009 04:08 PM

I am have the same problem.  Also I no longer have any progams listed in the Program Control page and am not able to add any either. 

Well, one can’t procrastinate forever.

 

Realizing I might need to spend awhile with this bullet, I waited until I had a good long stretch that I knew would be interruption free.  While perusing the desktop to see what all I might need to deal with, I noticed I had something called luinst.exe.  I right-clicked to check Properties, and it promptly announced it would run in the background without any further action from me.  User-hostile software in my book.

 

Anyway, it was time to run the Removal Tool.  I noticed I had somehow acquired two Norton Removal Tools; 2007.2.0.14 and 2009.0.0.41.  I figured the latter made more sense, so I attempted run it.

 

The first it told me was that I would need to use Control Panel Add/Delete Programs to remove pcAnywhere.  So, off I went. While scrolling through the list, I noticed both a Symantec LiveUpdate as well as a Symantec Live Update Notice (gee, guess where that probably came from!).  Figuring I wouldn’t both, and seeing from the Removal Tool splash screen that Live Update wasn’t included, I decided to go ahead and remove Live Update Notice.  I then proceeded to Uninstall pcAnywhere.  I then rebooted to be sure Live Update Notice and pcAnywhere were both gone, and they were.

 

I then decided to start Thunderbird, on the off-chance the two removals had somehow fixed something.  Lo and behold, Thunderbird started and prompted me for my password, which I entered and immediately received my patiently waiting email. Just to be sure it wasn’t a fluke, I rebooted again, and was once again able to login to Thunderbird.

 

So, was pcAnywhere the culprit?  Sort of doubtful since it had been on the box for 3-4 years; but, only one way to find out.

 

Re-installed pcAnywhere, rebooted, started Thunderbird–  happy as a clam!

 

So, all is well again, but its not entirely clear where the problem actually was.  My suspicion is that somewhere along the line, Live Update was involved, and that the installation/removal of Live Update Notice resulted in the clearing or correction of some registry items. Wish more substantive info could be provided, but that’s the way it goes.

 

Will wait a week or two and provide a final (I certainly hope) progress report.

Did you check your NIS2009 to ensure that it is working properly?