Window IPv6 Firewall - Querry

Assumption:  More than 1 Firewall creates havoc.

Question.  Do I disable or leave alone the Windows IPv6?  See image

 

Still in the world of XP SP3.  and periodic BSoD hit.  I am just looking for ways to resolve.

 

I suspect Symantec periodically hits an unauthorized area in Memory and Windows pops out "to protect itself"

 

the BSoD occur at random.  One time it is Stop Error 0x0000008E citing Sysdata.xml; another time it is Exception Privieged Instruction citing NAV32.exe; or "0x0000000A  IRQL_Not_Less_or_equal";Here is a listing of various files cited with a Stop Error:  Win32k.sys, NTFS.sys; Symerr.dll; NDIS.sys, sevinst.exe

 

I have updated drivers, .Net, removed and reinstalled Symantic AV so many times I lost count (and I submit to 'pse_support@symantec.com' each time I get a  Symantec Framework error); update the Sys files; have done Det Driver, Microsoft Fix-it; graphics driver, audio CODECs - you name it - I have probably done it.

 

I have check the registry - uninstalled and reinstalled almost every SW product on my machine.

 

My restore doesn't work (it fails each time I try to restore) - Microsoft update is unable to update Security Update for Office.

 

At least for a year, I have yet to have a Symantec full scan completed.  Quick scan does work and I have done a drive by drive or Directory by Director but each fail inconsistently.

 

So I am grasping at straws. 

What product and version are you using?

 

You mention the firewall but you also mention NAV32.exe and Symantec AV.

 

Dave

Dave:  Norton AV:  Ver 20.3.0.36

Attached is today's failure at performing a full scan.

 

I have done a search and NAV32.exe is not on the machine.  But the BSoD error identified it as such (chicken scratch on paper.  I will see if I have the image as I took photos of each screen as they occurred.

 

The firewall question was an attempt to determine if the Windows IPv6 listed in the Device Manager was a contributing factor - and based on the reply - it was not.  So the Firewall query is dis-associated now from the BSoD issue. 

 

Resolving the BSoD is the genesis of all my searching and investigating.

Norton Antivirus doesn't have a firewall so I don't know where you got that entry.

In addition to NAV32.exe, I don't think "ccscanw.dll" is a Norton file either.

 

Did you use to have a Symantec product on the system like Symantec AV or Symantec Endpoint Protection?

I'm sorry I'm wrong about ccscanw.dll, that one is a Norton File.

 

But the question remains, did you used to have a Symantec AV product or a Norton product that has a firewall like NIS or 360 installed on that system?

 

Dave

Roger - I did.  and it was removed.  to include registry changes.  That was the beginning of the BSoDs. 

 

I was stupid.  I had Endpoint loaded and started to get BSoD.  I did the app removed, then loaded Norton AV 19 (and then later 20)  There was a conflict and Symantec Help Desk did help remove the reminants of EndPoint.  It was a challenge.

 

Also, DEP was on for programs and service except those I select (I never recalled doing that:  the apps were ITunes and two others I do not recall).  It is now (and has been for about 6 months) on "Turn on DEP for essential Windows Program and Service only."

 

Attached are the photos of the BSODs

Dave -

I just re-read:  Norton AV doesn't have a Firewall?

OK, that explains it.  I figured SAV or endpoint was involved.

It obviously wasn't removed all the way.

 

Do you reall if support ran a tool called "cleanwipe"?

Thats the Symantec version of the removal tool.

 

You must have some drivers from SEP still being loaded thats causing the problem.

 

Dave

 

 


CiscoNMN wrote:

Dave -

I just re-read:  Norton AV doesn't have a Firewall?


NO, Norton Antivirus does not have a firewall.  If you have NAV installed then you would be using the windows firewall.

It does have something that I can't recall the name of that blocks worms and stuff but it is not a firewall by any means.

I can't find my laptop that has NAV installed, someone here must have borrowed it.

 

Dave

CleanWipe V4 is in my Computer folder - so I will make the assumption that it was - back when.

 

Okay.  This is what I will do.

 

1.  Remove Norton AV using the Norton Removal Tool

2.  Do a check for any Symantec folder and remove them (Registry included)

3. Do a CleanWipe

4.  Reinstall Norton AV

5.  Run a full scan (fingers crossed)

 

Now, does NAV have a firewall or do I need to activate Windows Firewall?   Windows has stated that another firewall is in use, and I assumed it was from NAV.

One of my employees has my system with NAV.

Give me a few minutes to install it on a test system here.

 

Do you already have the "cleanwipe" tool?

Dave

I don't think it's necessary to go through the registry.

If anything is left over you should be able to remove it from the device manager.

Same place you were before under "non-plug and play drivers" with the setting to "show hidden devices".

 

See this post by a Symantec employee:

http://community.norton.com/t5/Norton-360/Norton-Error-3043-1-on-Norton-360-v5/m-p/584264#M59330

 

Thats for Norton 360 but I see the same legacy drivers in the NAV 2013 I just installed:

 

Naveng

navex15

norton antivirus settings manager

norton identity safe

symantec data store

symantec iron driver

symantec network dispatch

symantec real time storage protection

symevent.

 

Those are the ones present for me, obviously they should be removed after uninstalling the product and running the norton removal tool.

 

Here is what I would do, if you choose to try this it will be at your own risk.

 

uninstall NAV, reboot, run the norton removal tool and reboot again.

run the symclean tool and reboot.

create a system restore point or registry backup

 

Serch for any of the above drivers in the device manager and remove them, answering NO to any prompt to reboot.

Any other drivers starting with Symantec must be leftovers from SEP.

 

I'm not sure about the firewall entry in your screenshot but I think I would delete that too.

I don't have that entry present but I did not enable IPv6 in XP before installing NAV.

 

Be very carefull deleting those drivers so you don't remove a necessary one by mistake.

Don't proceed if you get a warning about windows needing it to boot.

I know you will not have any problems by removing the files that subash listed.

 

After you reboot, before you reinstall NAV, Iook in the registry for a couple things.

I'm going to send you the registry keys in a private message because posting them my be frowned upon.

Click the envelope icon on the top right in a few minutes.

 

Dave

 

 

 

 

 

Whew!!

 

Since Sunday I was down.  That is why I did not reply.

 

Here is what happened.

 

I was questioning Firewall as the text in Windows Security Center stated that another Program has a Firewall.  My assumption was that was NAV. 

 

I did what I said.  Used NRT to remove all Norton Products (including NAV), I did the CleanWipe V4.

 

Since I knew that I had removed all protection, I went back to Windows Control Panel and looked to see if there was any change to the Security Center.  Guess what!?  Firewall was still Green and so was Virus Protection.  And guess what the text said!? 

 

"Windows PC Defender" reports....  So that explained my issues.

 

I made a mistake.  I loaded Maleware Bytes and Spybot (as that is what most recommended to do to get rid or
Windows PC Defender) - and Microsoft had a link to boot up with a Window PC Defender removal tool.

 

Don't know what happened, but the system went hay-wire and the registry went corrupt.  I lost CNTL-ALT-DEL, the Recycle Bin disappeared.  I couldn't even use "MSCONFIG".  No Restore points or link to restore.  All Admin tools were gone.

 

Since I have a day job, it took me from Sunday til today, to reconstruct Windows the old fashion way, and reinstall (in sequence) all of the Service Packs and updates.  Ditto with the application software.  I just got email up and running and am now doing a Full System Scan. 

 

Adobe is creating havoc as most documents are higher versions 8.5 and I had to reinstall ver 8.  When I get it all done, I will send you the pdf document that documents this mess.

 

But - I am proud of the repair (without MS assistance as they wanted $259 - and HP no longer support XP and recommended that I just buy a new PC!!)

 

So the lesson here is to tell everyone that NAV does not have a Firewall and to pay attention to the text in Windows Security Center.  Mine now properly states "Norton AntiVirus reports..."!!!!

 

 

Bummer.  After all that work.  I still get Symantec Framework error during a full scan (But a Blue Screen did not happen!!).  I have yet to have NAV perform a full scan.  I'll give it a rest.

 

Quick Scans work.

Assumption:  More than 1 Firewall creates havoc.

Question.  Do I disable or leave alone the Windows IPv6?  See image

 

Still in the world of XP SP3.  and periodic BSoD hit.  I am just looking for ways to resolve.

 

I suspect Symantec periodically hits an unauthorized area in Memory and Windows pops out "to protect itself"