Scan hangs and will not start

  All I have read through the boards and still cannot find a fix for my issue.  My scan starts but will just hang at "scanning commonly used files"  files scanned stays at zero and when I try to close the sacn it will not close.  Also when my system starts up a "backdoor trojan" alert pops up but will not give specifics.  I have tried scanning my disk, removing and reinstalling NIS 2009, and running the scan in safe mode (runs fin and detects nothing).  At help would be awesoem.

 

Thanks all.


matyellott wrote:

  All I have read through the boards and still cannot find a fix for my issue.  My scan starts but will just hang at "scanning commonly used files"  files scanned stays at zero and when I try to close the sacn it will not close.  Also when my system starts up a "backdoor trojan" alert pops up but will not give specifics.  I have tried scanning my disk, removing and reinstalling NIS 2009, and running the scan in safe mode (runs fin and detects nothing).  At help would be awesoem.

 

Thanks all.


Mat,

 

The first system scans take the longest length of time and some time takes forever.

 

Our general suggestion has been:

1.  Open the Norton Console

2.  Click on Settings

3.  Set the "Compressed Files Scan" to Off

4.  Go to Scan Exclusions, click on "configure"

5.  Make sure that "\System Volume Information\" is included (without the quotation marks),

6.  Click on \System Volume Information\ and select "edit" and make sure "include subfolders" is checked.

7.  Test this setting and see if you get a complete scan in a reasonable length of time.

 

If not, report back.

If you do get a reasonably long scan, then you can

1.  go back to the "Compressed Files Scan" and set it to ON

2.  make sure "remove infected files" is ON

3.  make sure "limited data extraction" is ON

4.  Test this setting with a complete scan.

 

If you are satisfied, you may stick with these settings.

If not, report back here for more advice.

 

Good luck,

Message Edited by mijcar on 05-24-2009 04:21 PM

pexley wrote:

...try uninstalling NIS with the norton removal tool and trying one of the following free anti-virus scans...


Please do not un-install your Norton Product just to try Anti-Virus Scanners.  If you want another Scanner(s) which you can use along-side you Norton Product, I would suggest Malwarebytes' Anti-Malware (excellent On-Demand Scanner) which you do not need to Pay for as you have Norton as your Real-Time Protection, and SUPERAntiSpyware Free Edition.   As always, make sure you Update them before Scanning, and dis-connect from the Internet. 

 

 

Malwarebytes' Anti-Malware for Windows: http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=contentBody;mostPopTwoColWrap.

 

SUPERAntiSpyware Free Edition for Windows: http://download.cnet.com/SuperAntiSpyware-Free-Edition/3000-8022_4-10523889.html?tag=mncol.

 

Message Edited by Floating_Red on 05-24-2009 11:37 PM

As I said I have no experience with those particular free security scans. I suppose you do not have to uninstall norton after all.

 

But matyellot, told you someone would recommend the use of them :smileywink:.

  All I have read through the boards and still cannot find a fix for my issue.  My scan starts but will just hang at "scanning commonly used files"  files scanned stays at zero and when I try to close the sacn it will not close.  Also when my system starts up a "backdoor trojan" alert pops up but will not give specifics.  I have tried scanning my disk, removing and reinstalling NIS 2009, and running the scan in safe mode (runs fin and detects nothing).  At help would be awesoem.

 

Thanks all.


pexley wrote:

But matyellot, told you someone would recommend the use of them :smileywink:.


And I got in first!  Mu-hahahahaha!  :smileysurprised:  :smileywink:  :smileyvery-happy:

 

 

 
Floating_Red wrote:

 

And I got in first!  Mu-hahahahaha!  :smileysurprised:  :smileywink:  :smileyvery-happy:

 

 

 

Wrong floating_red. You were only the first vet to recommend them.:smileyindifferent:

 

But I got in first! Mu-hahahahaha!!! :smileysurprised: :smileywink: :smileyvery-happy:

bleep, no luck with the Malware program it won’t even install correctly. Yes my virus definations are up to date I am running Spy no more on my system.  No luck yet after I update dthe setting as you suggested, when I run Spyno more I don’t get ant virus picked up. Scan still hanging< also I cannot exit the scan, even from the task manager. 

Sorry about that matyellott. We here at the norton forums tend to get a little overexcited sometimes :smileywink:.

 

Anyway,


matyellott wrote:
**bleep**, no luck with the Malware program it won't even install correctly. Yes my virus definations are up to date I am running Spy no more on my system.  No luck yet after I update dthe setting as you suggested, when I run Spyno more I don't get ant virus picked up. Scan still hanging< also I cannot exit the scan, even from the task manager. 

 

So did you have spy no more installed when you installed NIS 2009 for the first time? Even though I could not find any articles on line mentioning how spy no more and norton behave when installed on the same computer I think that having the two of them together may be causing your problem.

 

Try uninstalling spy no more and then using one click support in NIS 2009. Report back to us on the results.

Spy No More appears to be a multi-part antivirus, anti-malware program.  The two programs will definitel not run simultaneously.  It is also likely, considering the properties of Spy No More, that the installation of NIS2009 is likely to be corrupted.

Okay I uninstalled spyno more same issues, the backdoor trojan erron still pops up on startup.  this is insane.

matyellott -

 

Is the pop up saying that this is an unresolved issue?  If so, go to Quarantine, find the malware listed and select Remove (this will delete the Quarantined files from your system).

 

 No it does not say this, it just pops up for a second says "backdoor trojan detected" in addion I can run a scan fine in safe mode with no issues at all.

Sorry about this but you need to use an ‘offline’ scanner to clean this out.  This a scanner that does not boot off of your systems hard drive.  I recommend you use the Norton Recovery Tool.  If you got NIS2009 as a boxed product (you have a factory published CD), then you can run this tool from there.  Otherwise you can read how to make the Tool at this KB article .  You will need your subscription key so make sure you have that handy.  You can find it in My Documents\ Symantec folder.  Also online at www.mynortonaccount.com if you set one up.

 

 

  I actully did that already a day ago but let me try it again i will boot off of the cd and get back to you.

matyellott -

 

Can you report back how many files were scanned?  And what is the exact name of the file(s) that Norton detects as a "backdoor trojan"?


matyellott wrote:

 

 No it does not say this, it just pops up for a second says "backdoor trojan detected" in addion I can run a scan fine in safe mode with no issues at all.


I hate to add advice when good advice is already being given -- but something vital has been left out.

 

You should turn off your system restore.

[My Computer - Right click - select properties - click on System Restore - Click on Turn Off System Restore on All Drives - click Apply].

 

The reason is twofold.  First, much contemporary malware embed themselves in a System Restore File so that when you restore an earlier system, you're back where you started from, malware-wise.

Second, if NIS is trying to scan the System Restore File -- considering that it is a huge! collection, compressed, on many images of the registry and other key components -- it can apparantly freeze trying to work its way through these files; and if it actually tries to delete one, it won't be allowed to, which can create a behavior loop that might lock on the software.

 

Since you can no longer rely on the integrity of the System Restore, until you know your computer is clear of malware, there is no reason to keep it, for now; and doing so could be dangerous.

 


Why the scan is successful in Safe Mode, but not in regular mode, I don't know.  My guess would be that something is loaded into the system that is not essential to the system and that it fights removal.  Norton itself fights removal and shut-down in order to protect its integrity from malware.

 

It is even possible that what is being detected it something that "might" be malware, but is not convincingly enough so that Norton actually removes it.  You get the notice, but no action, tending to make me think your might well be safe.

 

Still ...

 

What I'd suggest about this is do the following:

 

Start>Run

type:

    msconfig

press:

    enter

click on

    Startup

uncheck everything except Norton, Symantec items.

Reboot

If the problem doesn't occur, then you have isolated the problem.

Now check about half the items and reboot again.

Either the problem will occur, or not.  Keep checking or unchecking until you have found the guilty party.

Then leave it unchecked, and report back here.

 

On the other hand, if the problem is not in startup, move to the Services Tab.

Make sure you check Hide All Microsoft Services.

Then use a similar strategy with the items left behind.

 

In less than an hour, you will most likely have identified the culprit.

If not, tell us and we'll see what we can do next.

 

 


delphinium wrote:
Spy No More appears to be a multi-part antivirus, anti-malware program.  The two programs will definitel not run simultaneously.  It is also likely, considering the properties of Spy No More, that the installation of NIS2009 is likely to be corrupted.

 

SpyNoMore has the same things as Norton Products do, i.e. Intrusion Prevention, Auto-Protect-style Scanning, and so on.  This means that N.I.S. 2009 is likely to be Corrupted.  I would, therefore, suggest that you un-install SpyNoMore - since you have Norton - un-install Norton using the Norton Removal Tool (use the N.R.T., re-start, use the Tool again, re-start and then try the Installation of Norton Internet Security 2009 again).  Do not re-install SpyNoMore.   I have already mentioned SUPERAntiSpyware Free Edition as a very good On-Demand Scanner.

 

Please let us know how you get on.

 

Here is my opinion.

 

Do all of the above and a little more.

 

1. Disable system restore.

2. Uninstall spynomore.

3. Reinstall NIS 2009.

4. Turn on early load.

5. Disconnect from the internet.

6. Run a full system scan with compressed file scan enabled.

7. Run the same scan in safe mode.

8. If all goes well turn on system restore again.

9. Let us know how everything turns out:smileywink:.

Message Edited by pexley on 05-25-2009 10:26 AM

My concern is that Norton may be damaged by the installation over top of Spy No More.  If that is the case, simply running a scan is not going to succeed.  To my understanding, the poster has already removed Spy No More, which hasn’t solved the problem. I also was unable to locate a removal tool in their support section.  So there may be a couple more issues to deal with.  We will see if Dbrisendine’s solution will help the problem with Spy No More gone.