It gets to the loading screen then takes me to startup repair. I’m running windows 7 and tried restoring to the point set by norton just before I tried to fix it and even earlier ones but no luck.
Your Startup Repair is kicking in first,
For Vista / Windows 7 you have to use the bootrec tool in command prompt to fix the MBR
bootrec /[command]
examples,
bootrec /RebuildBcd
bootrec /Fixmbr
bootrec /Fixboot
bootrec /ScanOs
Quads
Hi,
I'm getting contradictory results from different aspects of NPE Beta.
When I run a scan, two "bad" results come back, as in the screenshot below:
When I click on the cloud scan, both of them still come back as "bad." Clicking on the info button, I get something like this:
However, if I click on the individual files on the left, I get the following screens, in which the files are considered "favorable" despite the "bad" rating they just received:
Obviously both of these ratings can't be correct -- a file can't be both "bad' and "favorable." Which assessment should I trust?
More generally, this kind of discrepancy is perhaps an area where NPE can be improved while still in beta.
Also, an inline explanation of the reason why the file in question is considered unsafe, would be welcome.
--JorgeA
Jorge,
Thank you for the valuable feedback.
While the reputation of the file is one factor used in determining if the file is a threat , Norton Power Eraser uses a combination of heuristic techniques to identify potential threats.
To combat new and evolving threats, Norton Power Eraser is specifically engineered to be more aggressive when detecting threats. The threshold for which a file is considered 'Favorable' , does not provide enough certainty for NPE to consider the file safe.
We present the individual file reputation data so that users can review this when deciding how to address the file.
We recognize that for ‘Favorable’ files this is confusing and are looking at ways we can refine the flow in an update.
Nate,
Thanks very much for the explanation.
One way to help users when faced with these kinds of "on the one hand, but on the other hand" results, would be to provide additional details on what the nature of the possible threat is (that is, why NPE thinks it's bad; or maybe a description of what it thinks the bad file does). To minimize the size of the NPE program, this information could be made available online via a link right on the program screen ("Click here for more information about this threat").
Hope this helps.
Quads,
Thiis beta is capable at resolving the Zeroaccess variant that is a rootkit.
The new variants I believe you are refering to that do not have a rootkit component (detected as Trojan.Patchep!sys, Trojan.Zeroaccess.B) will require changes to NPE to address.
We are working on these changes as part of our official 3.1 release.
Regards,
Nate C.
Nate_C wrote:Quads,
Thiis beta is capable at resolving the Zeroaccess variant that is a rootkit.
The new variants I believe you are refering to that do not have a rootkit component (detected as Trojan.Patchep!sys, Trojan.Zeroaccess.B) will require changes to NPE to address.
We are working on these changes as part of our official 3.1 release.
Regards,
Nate C.
Hi Nate_C,
Perhpas you can assist with an answer here and also why a BETA download is included in a KB article .
http://community.norton.com/t5/Area-51/Question-on-NPE-version-number/td-p/773930
TIA for your assistance!
The Norton team released a new Norton Power Eraser beta 3.1.0.8.
I hope many of you have a chance to try it and let us know what you think..
We look forward to hearing your feedback and great ideas.
Key changes in this release:
• Zeroaccess remediation
The tool has been updated to remediate Trojan.Zeroaccess and Trojan.Zeroaccess.B.
• Advanced UI
Tools and features designed for advanced users and technicians to help diagnose and remove threats.
• Reputation Scan
Tool in the Advanced UI for scanning the reputation of a file or folder
You can download the Norton Power Eraser Beta here:
http://security.symantec.com/nbrt/npe.aspx?&env=beta
Hahaha,
So users still don't use NPE with the zeroaccess that is on the forums at the moment, NPE can't deal with and can still use a BSOD. or causing Windows to not start due to Pihar or MaxSS in behind
Our malware removal proceedure is still the best way.
If you have anything like this, Leave NPE alone.
Quads
Don't forget the BCD, and please have NPE so that it is able to scan without any restart first, like TDSSkiller and aswMBR, that way if a scan detects a Gen or suspected variant of any of these families it won't try to fix but also never tried to restart the system first causing any sort of BSOD or jamming due to some sort of newbie variant.
Nate_C wrote:
Quads,
Thiis beta is capable at resolving the Zeroaccess variant that is a rootkit.
The new variants I believe you are refering to that do not have a rootkit component (detected as Trojan.Patchep!sys, Trojan.Zeroaccess.B) will require changes to NPE to address.
We are working on these changes as part of our official 3.1 release.
Regards,
Nate C.
The zeroaccess patched services.exe for some MD5's are no longer Trojan.Patchep!sys but now Trojan.Zeroaccess!inf which is correct.
Quads
Post moved to its own.
Hi, People!
Downloaded and Installed Norton Power Eraser, and when it loaded the Interface, it had "Pre-Release Software" on it. While using it, this Error happened (below). Can confirm that Internet Connection was present throughout the use of Norton Power Eraser. Sent the Error Report to Symantec. If you wish to investigate this further, please let me know. Thanks!
Hi Floating Red,
I have responded in my edit of your other post re: NPE here:
I am going to ask a moderator to merge this thread with the other thread as the situation appears to be tied closely together.
Zeroaccess, services.exe https://www.virustotal.com/file/d370021aecf0826cf3935467c09fbca0960ee0cd7f99fbf83d50fe204537e133/analysis/
Floating_Red wrote:Hi, People!
Downloaded and Installed Norton Power Eraser, and when it loaded the Interface, it had "Pre-Release Software" on it. While using it, this Error happened (below). Can confirm that Internet Connection was present throughout the use of Norton Power Eraser. Sent the Error Report to Symantec. If you wish to investigate this further, please let me know. Thanks!
Same here today using the last NPE version. It's impossible to finish the scan and after three tries I get the same error code.
Still getting this Error. Used the latest Version, non-Beta Version.