Hi,
The reason there is so many of them is because not all of them will be Submitting the same information.
At last! Left my pc in idle state while watching the footy and when I returned I saw in the logs that eight files were submitted within the last few minutes, so, at least that’s something.
That's great to see. Thanks for letting us know.
I’ve had 1 file submitted out of about 40. What has me concerned also is that some of these other 40 files are symantec files too. I have manually scanned some of the noted files and symantec says they are clean. Perhaps more have been submitted, but they aren’t showing up in that community log. My Antivirus is part of System Works Standard 12, so I don’t get to see all the information some of you are seeing I guess. I haven’t done a full manual scan to see if anything is wrong, but I did have an idle full system scan that ran, but that was just before the newest definiton file came out and before all these file submissions showed up on Friday morning. It looks like this definition is too sensitive if all these people are having all these files that need to be submitted and this is only from the people who know about this Forum also.
Just a thought...Could this be happening because of a Windows Update that was published on August 26 for Vista? Only the first post mentions what OS was being used and it was Vista. I'm using Vista 32 bit as well.
majorbuzz wrote:Just a thought...Could this be happening because of a Windows Update that was published on August 26 for Vista? Only the first post mentions what OS was being used and it was Vista. I'm using Vista 32 bit as well.
There was also an Update for Windows X.P. a few days' ago as well...
floplot wrote:
I've had 1 file submitted out of about 40. What has me concerned also is that some of these other 40 files are symantec files too. I have manually scanned some of the noted files and symantec says they are clean. Perhaps more have been submitted, but they aren't showing up in that community log. My Antivirus is part of System Works Standard 12, so I don't get to see all the information some of you are seeing I guess. I haven't done a full manual scan to see if anything is wrong, but I did have an idle full system scan that ran, but that was just before the newest definiton file came out and before all these file submissions showed up on Friday morning. It looks like this definition is too sensitive if all these people are having all these files that need to be submitted and this is only from the people who know about this Forum also.
When you see Files "Pending" in the Norton Community Watch, please give it a few days for symantec Security Response to Analyse the Files being Submitted before doing a Full System Scan, as Files being Submitted via N.C.W. will not have any Signatures Created for them, which may explain nothing being Detected.
I’m using xp pro sp 3 IE 7. I don’t know which update you are referring to and if it was also offered for xp. According to other posts about this topic, apparently Norton’s added a definition for at least one of these items which is super sensitive and it’s picking up all sorts of files on everyone’s computer it looks like. Hopefully, they will tone this down a little so that everyone’s computers don’t have parts of programs deleted. From what I have seen in other threads, it’s not just with Vista.
My Idle full system scan won’t be running until early Friday morning, so I hope by then this will be cleared up and I will get a clean report again. Then again since some of the flagged files that are being submitted are Symantec Files, I am hoping that the program will run correctly if there is something wrong with the symantec files too. I’ve seen a slow down of new IPS files since there has only been one update for this in the month of August and now my idle quick scans has slowed down also as to the number of them.
I am not happy with the way Symantec has treated me as a customer. Last week I wasted a considerable amount of time and energy on the 16.7 issue. Then yesterday my laptop nearly ground to a halt trying to process all of these submissions. Even after I stopped the quiet time scan it was still using most of the system resources. I thought it was another 16.7 problem and I really didn't want to go through that again so I rolled back to 16.5. If Symantec had given us a heads up I would not have wasted my time rolling back. Now to add insult to injury, the antiphishing updates are not working on my 16.5 installation. I have Vista Home Premium 64bit. I read that there is supposed to be a live update patch to fix this. Guess what. No patch was downloaded. Thanks a lot Symantec.
car825,
These submissions should not be using so much CPU times... in my mind there seems as though there may be another underlying cause...
Majorbuzz,
I do not believe this has any connection with the Windows update. These defintions are sent out every now and then, it may be a week between them or a year, I don't know.
Everyone,
These defintions are not actually 'detecting' anything as per se, they are simply flagging files that are suspicious according to the definition. THis is so that Symantec can geher intel on good, non-malicious files and programs, so that they can modify the definition, ensuring that it does not detect and remove or block legitimate programs.
There is really nothing to worry about with these submissions and 'detections' in your log files. As I mentioned before, this has happened numerous times in the past with other definitions such as Suspicious.Farfli and so forth.
Regards,
Matt
Interestingly enough, despite the fact that I went into my Norton settings and disabled Community Watch, it keeps on running, and this is even after a computer re-boot. And sometimes under the column 'Ran During Idle' it says NO, none the less it keeps on running.
Glad to say that all the pending submissions have disappeared with 1 statistical submission having been submitted. I guess that problem is cleared up for me.
Hi Floplot. How can you tell using NIS 2009 what has been pending and what is a statistical submission? I thought I was pretty good at using this program, and yet, all the info I can find is in the print screen above.
Thanks In Advance
Bruce
Hi
Well, I have the Antivirus part since I have System Works 12 Standard. I believe though that the Antivirus part is the same as in NIS. I have the new version of it also. When I look in Security History and go down to the Norton Community Watch part, it will show when things are being processed, or pending or submitted. I know I had like 40 items that were listed when this first started. Some were statistical and some were actual files that were pending to be sent. Yesterday I saw that one statistical item had been submitted, but as of this morning, all those entries are now gone except for the one that says submitted on it. I guess I look often enough at the program to see these things. I suppose if you don't look that often at the logs you won't see it and see only those that have been submitted. Usually it just says Norton Community Watch feedback and if you click on more details, then you can see what was actually submitted.
Car825 has nothing to do with the verison of NIS your running, it’s just bad Definitions is all. try running live update tell it no longer updates and rebooting and then do a quick scan and see if it’s flaging any new Statistical Submission: BloodHound.SymVT.FP as of yeasterday it should have stoped. or it did here anyway,
Hi again Floplot. Thanks for your directions, they were on the money. I saw about half a dozen were submitted, but I'd guess I have several hundred pending, and none processed.
I'd also like to address Jarrycanada. I also followed your advice. I ran both a quick and full system scan and everything went normally.
So, I suppose my last question is what happens from here. I read previously that eventually everything will be submitted and deleted from my logs, though it has been 3 days already and 99% are still pending.
Thanks guys for your help.
Bruce
Majorbuzz, you can just delete them if your really want. they will take two or three days to get sent to symantec. I’ve noticed that Submissions mostly get sent to symantec on boot up when you first connect. I also suspect they only get sent if your connection is idling. so if your doing a lot of stuff on your pc, it may take longer.
Further to my earlier post, Norton submitted two batches of about eight files and then another eight or so were newly pending. I still had literally hundreds of the other ones still sitting there and so decided to delete the lot last night. This morning, after leaving the pc idle for some time, there were three new files 'pending'. Later today, I started the pc and left idle for about 40 mins and now the logs for the 'Community Watch have been completely cleared? I have nothing in there at all. Someone else mentioned this also some 4 or 5 posts back!
When I look at the 'CPU' I still see the 'Community Watch' line staying an orange (Live) colour all the time.
Hi Brummie and everyone one else. I also followed your steps. I no longer show any files, but the 'Community Watch' line is still always active. It must be tired, as it's been active for days, even after re-booting. Isn't there a way to put it to sleep?
Bruce