Suspicious activity?

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

Some other users are having the same Issue as you in the N.I.S. Beta Forums: http://community.norton.com/norton/board/message?board.id=nis_pb&thread.id=3390

 

I would suggest you do the following:

01. Update your Virus Definitions.

02. Do a Full System Scan in Safe Mode.

03. Let us know the Results by Posting here again.

 

Again, Norton will keep an "eye" on this and, if it tries to do any damage to your computer, it will Block and/or Remove it.

I run NAV2008 on Vista Home premium operating system with all updates current

 

Yesterday I found the following in My Norton History under suspicious activity around 5:53pm with a low risk

 It made modifications to the regestry as a run once type of function

rbsolnupdateenu.3.0.1.exe

 

It showed detected in c:\users\admin\appdata\local\temp\rbsolnupdateeenu.3.0.1.exe

 

When I went to find it, (even after clicking show hidden files) I could only go so far as c:\users\admin\appdata\local\temp

When I opened up temp it showed nothing, so I can't "check" the properties

 

I googled it and got the assortment of "this is bad our product can clean it "  information, you know the type of sites that find everything a problem. So I'm not sure if it is malicious or just some cleaning tool.  

 

I have an HP computer and printer. Around the same time  that the suspicious activity moted this, my activity log read this:

 

5:53:40pm 

an instance of c:\ProgramFiles\HP\DigitalImaging\ProductAssistant\bin\hprbUpdate.exe is preparing to access the internet

 

So I'm thinking that the rbsolnupdateenu.3.0.1.exe may have something to do with the HP printer or some other HP function

Anyone else experience this?

I think it happened once in the past and it may have to do with some HP clean up thing

 

My scans (in normal mode) come up clean. Just thought it odd that there was no file in the temp folder.

Or would that be the case if it were a temp run once type of thing?

Please do  a F.S.S. in S.M. to make sure nothing is on your system.

 

Check out the Web Link I gave you if not already done so.

 

If it did run once, then the File should still be there, I would have thought...

Red, I found these on  google attempt today, so I'm think its ok

 

 wextract_cleanup is a cleanup tool that is included with many programs (i.e. updates from microsoft) to help clean up temporary or cab files created and used for temporary installation purposes. It installs itself to the registry so it can run from a temporary location when Windows loads. You usually get a message at the end of an install that it wants to do this. After it does its cleanup, the program should clear itself from the registry and not run on subsequent reboots.http://www.bleepingcomputer.com/forums/index.php?showtopic=49642&pid=268028&st=0&#entry268028

 

wextract_cleanup0 startup entries are usually legitimate entries added a RunOnce registry key to clean up temporary or cab files created by installer software.
http://forums.spybot.info/showthread.php?t=20619

Also, my Norton Suspicious Activity indicated it as a low risk

No I haven't seen that one yet, but I don't have any of the HP camera stuff installed on the computer.  I haven't seen any updates from HP on any of the laser printers come through in some time.  It may be an update to the updater or something.  I also don't have those set up to run automatically either.  Have you tried to go to the HP Support site and scan for updates for your computer?  This may answer your question if it comes up with no updates.  My stuff is so out of date (LJ4L and stuff like that) that I wouldn't expect to see anything except "we don't support that junk anymore :) ".  

 

It is probably a scheduler going out to see if there is anything new and the firewall caught it, since it has never run before.  Just a guess.