Nis internet security starts up automatically when my laptop boots, however it is not listed as one of my startup items. Why is that?
Nis internet security starts up automatically when my laptop boots, however it is not listed as one of my startup items. Why is that?
csampson wrote:Nis internet security starts up automatically when my laptop boots, however it is not listed as one of my startup items. Why is that?
I'm running Norton 360 but I imagine that NIS is similar regarding the location of the startup services.
When we look at the Master Boot Record (located at Sector 0) on our Hard Drives, we'll see several Symantic services included. Here's some of my MBR scan where Symantic/Norton services and items are listed:
Service BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\BASHDefs\20140121.001\BHDrvx64.sys **LOCKED** 5
Service ccSet_N360 C:\Windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys **LOCKED** 5
Service eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys **LOCKED** 5
Service EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys **LOCKED** 5
Service IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\IPSDefs\20140205.001\IDSvia64.sys **LOCKED** 5
Service NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\VirusDefs\20140204.024\ENG64.SYS **LOCKED** 5
Service NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.2.0.19\Definitions\VirusDefs\20140204.024\EX64.SYS **LOCKED** 5
Service SRTSPX C:\Windows\system32\drivers\N360x64\1404000.028\SRTSPX64.SYS **LOCKED** 5
Service SymDS C:\Windows\system32\drivers\N360x64\1404000.028\SYMDS64.SYS **LOCKED** 5
Service SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS **LOCKED** 5
Service SymIRON C:\Windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS **LOCKED** 5
Service SymNetS C:\Windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS **LOCKED** 5
For those interested in viewing (and removing) items, services, drivers, that are loaded when the PC is starting up, there's a good PC tool that is free from "Sysinternals", a highly-regarded set of tools that are used by many IT professionals as well as everyday PC users. The Startup-viewing tool is "Autoruns".
I've used Autoruns to remove unwanted startup items, those items that will occastionally get loaded into the Startup when the user is downloading or installing an application.
I still use the old "Startup" folder for adding a script or tool that I want to run during Windows user logon.
WinPatrol is also a useful tool for managing start ups....
It runs as a service thats why you don't see it.
Services run through the windows registry, you will never find them in the MBR or track 0 of the hard drive.
Dave
I figured that was the reason as I was able to see all of the services running and Norton was amoung them. It just seemed that I remember not too long ago when symantec/norton was in the start menu listings too.
Scoop8 was so close, but didn't quite recognize the answer shown to him by AutoRuns. If you press the search button in AutoRuns, or use F3, or Ctrl+F, then type NIS (all caps) and click the "Match case" option, then click the "Find next" button, the first item found is most likely NIS in the section of the list called "HKLM\System\CurrentControlSet\Services". If not, keep pressing F3 until you get there.
That's exactly where you'll find it in the registry. In fact, if you double-click the NIS line, you will be taken right to the entry in RegEdit. Unless you really know what you are doing, DO NOT make ANY changes in the registry. Changes are saved immediately and there is NO undo. You CANNOT exit RegEdit without saving changes, but you may not see the effects of those changes until the next boot.
CHANGES TO THE REGISTRY can make your SYSTEM UNBOOTABLE very easily.
BTW, if you already know that you're searching for a Service, you can just click on the Services tab in AutoRuns and get to the listing quicker. In fact, you don't have to search, it's probably visible near the middle of the first screen without even scrolling to see it. (unless you're on a 5" screen or at very low resolution) 