VRQ Tool when Norton Internet Security Fails use and questions

All too frequently malicious programs evade the protections in Norton Internet Security. The malicious programs are not picked up on the scans.
Usually these particular malicious files and programs are not picked up on ANY scan from ANY company. So you now have your computer attacked
and no scan is able to handle this problem.

However the Norton VRQ Tool DOES pick up many of these destructive and malicious programs.
The VRQ Tool will pick the attack up even if the various Scans show no problem.

I have been using the VRQ Tool with great success.
The problem starts when the VRQ Tool picks up malicious programs, but the "Full Mode Cleanup" does not
remove it.
In that case it must be removed manually, perhaps from the Registry. There are some malicious programs that require this manual removal.
The problem becomes more complicated when the location of the malicious file is not correctly reported by VRQ.
So now you know you have this malicious file that must be deleted BUT the reported location in VRQ does not seem to be correct.
Some malicious files and programs appear to be able to cause incorrect name and location reporting. So this of course makes it harder
to find and delete the file.

I cannot find any instructions for use of the VRQ tool.

If anyone has a solution to finding the files that VRQ detects as malicious please contact me.

In this particular case the VRQ detects seven or eight files. On full mode cleanup in will remove three but the same four files remain.
It cannot get rid of those four files. More files are created by the malicious file/program and VRQ can control the proliferation but not remove
automatically the souce. SO, how do I locate the source and delete it?????????

While I have Norton Internet Security 2009, Symantec will NOT help with this problem. It appears this attack got by Norton Internet Security.
Symantec wants money for each call for help in using the VRQ tool which can become ridiculous.

Again any ideas how to find these malicious files and does Symantec provide any on line support or documentation for use of the VRQ Tool.
I think it is an excellent tool and it uses a different technology than the regular Norton scans.
I hope someone can help with using the VRQ Tool.
Thank you very much.
Kenneth Ellman

 

<<Edit: Removed personal email ID and mobile number from the post as per the participation guidelines.>>

Message Edited by TomV on 03-25-2009 09:57 PM

From Kenneth Ellman
To Delphinium
Kenny replies

The Norton VRQ Tool can be found at :

Norton.com/vss

This is of course a Symantec product…

I have not found any other tool just like this and it has found malicious files and programs that all other scans fail.
Unfortunately Symantec does not provide documentation for this tool but with continued use proficiency developes like
with anything else.

As you may know there are some excellent hints as to how to approach finding and deleting malicious programs
on the post here on this community as:
How to troubleshoot a suspected Malware infection
by
Administrator Tony_Weiss

But unfortunately it does not appear to discuss the use of the VRQ Tool which would help many, many, people.

Anyone familiar with an approach to solving my problem as described above would be greatly appreciated.


When I call Norton Technical Support with questions about use of the VRQ Tool they say very little or just hang up.
Any links you can provide for useful information or programs is appreciated. Thank you very much .
Kenneth Ellman

Hijackthis is a free utility that can be found here:http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

Use the third choice on the list. The page provides a quick start guide and Faq.

 

You can see what kind of a log it generates in this thread: http://community.norton.com/norton/board/message?board.id=nis_feedback&thread.id=42683

 

There is a rather interesting utility where you can copy and paste the Hijackthis log to be analized.  We have Quads and Yogesh Mohan on the forum to have a look at the log but if you are looking for something more immediate, it's quite informative.

http://www.hijackthis.de/

 

Unless you are confident using this kind of utility, you can post the log here for a second opinion before deleting anything.

 

 

Hi

I copied and pasted the  Norton.com/vss and it lead to this page.

vcq.JPG

 

 

 

No idea of what it does,any ideas?

Is it part of Norton Ghost?

ke replies to MO .

NO. It is not part ot Ghost. The VRQ Tool is an independent tool of Symantec to search for and delete malicious programs.
It does NOT provide any protection like Internet Security.
The VRQ Tool is used AFTER you are infected and damaged.
It is used to detect and remove the attack.
I am trying to use this tool better and looking for any advice and information.
Thank you .
Kenneth Ellman

The tool can be foundat norton.com/vss.
Thanks again
kenny

I dont know why this is marked as solved, but I have NOT received any solution to the VRQ problem.

It was clicked on by error.

 

Kenneth Ellman

All too frequently malicious programs evade the protections in Norton Internet Security. The malicious programs are not picked up on the scans.
Usually these particular malicious files and programs are not picked up on ANY scan from ANY company. So you now have your computer attacked
and no scan is able to handle this problem.

However the Norton VRQ Tool DOES pick up many of these destructive and malicious programs.
The VRQ Tool will pick the attack up even if the various Scans show no problem.

I have been using the VRQ Tool with great success.
The problem starts when the VRQ Tool picks up malicious programs, but the "Full Mode Cleanup" does not
remove it.
In that case it must be removed manually, perhaps from the Registry. There are some malicious programs that require this manual removal.
The problem becomes more complicated when the location of the malicious file is not correctly reported by VRQ.
So now you know you have this malicious file that must be deleted BUT the reported location in VRQ does not seem to be correct.
Some malicious files and programs appear to be able to cause incorrect name and location reporting. So this of course makes it harder
to find and delete the file.

I cannot find any instructions for use of the VRQ tool.

If anyone has a solution to finding the files that VRQ detects as malicious please contact me.

In this particular case the VRQ detects seven or eight files. On full mode cleanup in will remove three but the same four files remain.
It cannot get rid of those four files. More files are created by the malicious file/program and VRQ can control the proliferation but not remove
automatically the souce. SO, how do I locate the source and delete it?????????

While I have Norton Internet Security 2009, Symantec will NOT help with this problem. It appears this attack got by Norton Internet Security.
Symantec wants money for each call for help in using the VRQ tool which can become ridiculous.

Again any ideas how to find these malicious files and does Symantec provide any on line support or documentation for use of the VRQ Tool.
I think it is an excellent tool and it uses a different technology than the regular Norton scans.
I hope someone can help with using the VRQ Tool.
Thank you very much.
Kenneth Ellman

 

<<Edit: Removed personal email ID and mobile number from the post as per the participation guidelines.>>

Message Edited by TomV on 03-25-2009 09:57 PM

Hi

I think the URL you give is incomplete,The only reason I have been able to get the screenshot, is when I copy and pasted what you have posted and the browser added the rest and that is where I was lead to.There was no description or indication of what it is or does.I have googled it but have only found bits and pieces.Maybe a Mod can step in and shed some light

 

The only one who can click solved is you,as only you have the option to do so all we have is the kudos button if it is not our thread.:smileywink:

Sorry I can not be of help.

Hello,

               The Norton Symantec VRQ Tool is located at:

 

 

Norton.com/vss

 

There is no danger in downloading this tool from Symantec. Even if you run it there are no changes. 

Changes only take place if you make them by using the "Full Mode Cleanup" or other choices AFTER you run the tool and get a report. 

 

It is also very easy to delete from your system after installation. 

 

 Yes, I may have checked the solved button by error.

 

If anyone developes any knowledge with this tool please let me know.

 

I believe it is very revealing. 

 

   Thank you.

 

Kenneth Ellman

Has anyone used the VRQ Tool???
Does anyone have information on it??
Thanks.
Kenneth Ellman

Sorry Keatkenneth:

 

If any of us knew what to do with it or where to find more information on its use, somebody would have been here to tell you.  It looks like we're coming up dry.  We all use different programs.

Would anyone be willing to try and use the VRQ Tool from Symantec and tell me what they think??

I would like to start a community of VRQ Tool Users and see what we can learn about best application of this tool. 

 

The VRQ Tool can be downloaded from the Symantec website directly at:

Norton.com/vss

 

So please consider trying out this tool and letting me know what you think. 

 

Thank you very much. 

I am still wondering why it seems to be more important to get information on this particular tool than it is to remove the malware from your system. 

ke reply to delphinium

I think that I have removed all malware from the computers. At this time the various computers seem to be properly protected.


So I do not now know of an immediate malicious program problem.

I want to have all the defenses, tools and protections necessary to prevent and control future attacks.
Computer attacks are a continuing exposure that can only be eliminated by not having computers connected to the outside.

My request for feedback on the VRQ Tool is because I have not found much commentary or instructions on the
use of the tool. I have seen it used by Symantec Virus Removal Department and it seems effective for certain
difficult problems.

I think the more it is used by persons on this site the more we can learn about it from each other.
The more we know and the more tools we have the better it is to protect against these problems.

So is anyone interested in learning about the use, problems and potential of the VRQ??
Thank you.


Hi keatkenneth,

 

The VRQ Tool is an internal tool used to probe for potential infections.  It does not use any virus definitions nor can it detect threats heuristically, and is intended for the sole use of a trained Symantec staff person in conjunction with an internal knowledgebase and other tools.  This tool is not intended for general public use and has no documentation to support it.

 

I hope this answers your questions about the tool. Thanks!

It appears that Symantec is not able or willing to release documentation  on using the VRQ Tool.   

If any body is interested in working on making documentation for the VRQ Tool and posting such here as a thread,  please let me know and we can work on this.  I have been using the VRQ tool on and off for some time and I find it  very valuable.

It appears to track changes in certain programs and then makes a report of such to you. 

While it is best to   carefully review each alert the VRQ gives, it does come with a Full Mode Cleanup that seems to work quite well. 

SO I would like to start a documentation thread on this VRQ and in this way we can learn how to better use it.   

Anyone interested, please contact me. 

Thank you.

Kenneth Ellman