I run Windows 8 on a Dell computer and I have NIS 2012 installed. I have French versions of the OS and NIS and in this text, I try to translate as exactly as possible what happens on my computer
Lately, I have had the maintenance center telling me frequently that I had no firewall running and it offered me to activate either the Windows firewall or Norton. Clicking on the Activate gave nothing. Same about spyware.
After restarting and getting the same, I ran NIS, chose Support, /last version. The Symantec page always opens with System error (http://updatecenter.norton.com/Manual/Error). I manually choose my product and version and always get the page (http://updatecenter.norton.com/ManualUpdate/Index?&NUCSID=2&NUCVER=2012) that says a new version is available. I do everything as directed and the problem usually disappears for a while.
In one instance, I had an error in the installation and the site told me to use Norton Remove and Reinstall. I did this but the installation failed. I was instructed to run Norton Power Eraser, which told me I had a bad file: Directx.exe which I deleted. The file appeared with a red V icon.
Lately, I had a call from someone (I didn’t understand well the name of the company) who told me they were informed I had a bad file. When I told them I had NIS, they hung up.
I tried to run a scan but nothing happened. I could, though run a reputation scan and had that same file Directx.exe(which I had deleted) marqued as bad (C:\Users(Utilisateurs)\.me.\Appdata\Roaming\Microsoft\Windows\Startup menu\Programs\Startup\directx.exe
In the Task manager, when I had the file, there were a few processes called ‘whome’ running, with that same red V icon. I killed the processes.
I deleted the file, restarted the computer and could run a scan which found nothing.
When the maintenance center suggested to review the startup items in the task manager, I found ‘whome’ still there at startup.I deactivated it. Searching for the source, I found ‘Startup.exe’ in a C:sers\current user…\AppData\Local\Temp with that same icon. In the properties of the file, it’s source is identified as C:Users\vm7\Desktop\amvpCR.exe. I deleted the file but could not empty the recycle bin. Using the new information (amvpcr.exe) I found some references to the file as being a virus.
I finally emptied the recycle bin with the cmd prompt. But I suspect there are certainly keys in the registry related to those files and I fear they will be back.
Since NIS can’t run a scan when the file is present, since Power Eraser did not find Setup.exe as a problem, why are those files not recognized as viruses or other malware by NIS ? When will that be corrected ?
I attach views of the Properties of the file where the icon can be seen
Thank You