wysteriamo
join:2002-11-01
Saint Louis, MO
|  Norton Internet Security03 is disabled?
After reboot, I'm missing the little green globe "icon" down in my taskbar. Under "Customize Notifications", the globe is not there, but an NIS folder icon is.
Short of a complete reinstall, is there any way to get it back?
I have XP Home, p4, 40G, DSL, NIS2003 & am the owner & administrator of all running software.
I just updated my definitions, rebooted, ran a virus scan (nothing found), & went to USA Today.com---& got a popup. When I went to Start>>All Programs>>NIS>>NIS, I could see that everything (except the AV) is disabled. Yikes! I know that's not good, but I can't figure out how to get back in & turn everything "on". It did tell me that I wasn't authorized to change the NIS settings.
TaskMgr looks like it's lacking a running item, so I'll keep searching. MSCONFIG looks like normal. Is there anything else that comes to mind?
I'm gonna go run SPYBOT & see if anything comes up there.
As background info, when I got up today, I saw a shortcut icon for "RealOne SuperPass". It was a cd that came in a box of cereal; apparently my man installed it.
(Is there a little message icon for "Lisa is rolling her eyes"?) Anyway, he said that when it asked him about accessing the internet, he declined the offer.
Plus when I checked my email, my mother said that she may have just sent us all a "pink" virus. Ran to Symantec's site & did a search on "pink". Only found something vague about (excel??) worksheets--which I don't use & don't think apply here. That's really what started me on the AV scan. Hotmail is now down & I cannot reach her by phone.
As I said, Plan B is to reinstall Symantec. I'll be back. Thanks///Lisa
|
|
wysteriamo
join:2002-11-01
Saint Louis, MO | "Pretty Park" may be the name. I'll keep searching & post back here. |
|
Michael
Premium
join:2001-05-06
Canada | Try running LU again and see if there is another update. I know this helped one person. I will see if I can find their post.
--
The views expressed in this post do not necessarily reflect the views of the poster. |
|
BlueWorm
join:2002-10-14
Troy, MI | reply to wysteriamo
This is a known problem with the 6.04 patch to Norton Internet Security. Symantec does not have a fix for it yet. |
|
Michael
Premium
join:2001-05-06
Canada
| reply to wysteriamo
Check out this thread for others with the same problem. One person's problems were solved when they ran LU again.
»Painful Norton LiveUpdate 3June03
--
The views expressed in this post do not necessarily reflect the views of the poster. |
|
jvmorris
I Am The Man Who Was Not There.
Premium,MVM
join:2001-04-03
Reston, VA
| reply to wysteriamo
Hmmm, "RealOne Superpass". This may be irrelevant, but we recently found newdotnet installed on a Win XP box here (using AdAware 6) and (unfortunately) let AdAware remove it. Shortly thereafter, the Win XP Home box went belly up.
When we restored the machine to basic functionality, NIS (2002 in our case) was disabled (and you couldn't tell this from the system tray icon; you had to open the NIS console). Well, it seems that at least some versions of Real freeware products have apparently been detected as having newdotnet in them.
So, the question I'm asking (I think) is have you removed newdotnet (with or without using Ad Aware 6) from the box on or about the time this problem surfaced?
May be nothing, just a thought.
--
Regards, Joseph V. Morris |
|
Tuulilapsi
Kenosis
join:2002-07-29
Finland | This somewhat off-topic, but which AAW build was used to remove New.Net? The latest 162 should have no problems... |
|
wysteriamo
join:2002-11-01
Saint Louis, MO
| reply to wysteriamo
Thanks for the comments. 
Got hold of my mother & she confirmed that my aunt did send her the pretty park thing...which they both seem to think they've fixed. I don't believe I got it, but the timing seems too close.
Anyway, I'm printing out that other link & getting ready to run Live Update again. I'll be back, but here's what I've got: |
|
jvmorris
I Am The Man Who Was Not There.
Premium,MVM
join:2001-04-03
Reston, VA
| reply to Tuulilapsi
said by Tuulilapsi  :
This somewhat off-topic, but which AAW build was used to remove New.Net? The latest 162 should have no problems...
Tuulilapsi,
I don't know. I didn't do it!  That particular box had not been in use for the past two or three weeks or so and it was only brought to my attention after the problem was discovered.
Actually, some of the components wouldn't be removed by AdAware because they were apparently in use and were removed from Windows Explorer. When I got there (and managed to get the box functional again after a fashion) I found the references to newdotnet in the Ad-Aware logs and started asking questions. Some traced back to a directory for First Look, but there were also references in another directory which I don't recall at the moment (will have to check). I had to restore the newdotnet entries in the AdAware quarantine log to get the system (more or less) functional again, but it's Internet functionality is still down the tubes.
And, incidentally, what I found in NIS 2002 on that machine was pretty much identical to what wysteriamo has subsequently displayed. (The display looked different, of course.)
One other item of interest: The Ad-Aware sig files that were in use at that time dated back to 9 Feb (working off memory here) and at that date, the CEXX site said that using Ad-Aware to remove newdotnet could cause problems.
Work continues (when I can get to the box).
--
Regards, Joseph V. Morris |
|
jvmorris
I Am The Man Who Was Not There.
Premium,MVM
join:2001-04-03
Reston, VA
| reply to Tuulilapsi
Tuuli,
sorry, left this out of my previous response.
The CEXX article on newdotnet may be found at »www.cexx.org/newnet.htm . Note that newdotnet works as an LSP in the TCP/IP stack. (Shades of the old "Parallel Stacks" thread that Kalford initiated.) How this might interact with NIS 2003's proxy servers remains to be determined. And, again, this may be totally irrelevant to the current thread.
--
Regards, Joseph V. Morris |
|
Tuulilapsi
Kenosis
join:2002-07-29
Finland
|  reply to jvmorris
said by jvmorris :
The Ad-Aware sig files that were in use at that time dated back to 9 Feb (working off memory here) and at that date, the CEXX site said that using Ad-Aware to remove newdotnet could cause problems.
AAW 6 Build 162 was announced on 9th of February, incidentally, so it's highly likely the AAW build used was the old 160 one, which is known to cause problems with LSP hijackers like New.Net (and WebHancer, and and and  ). That probably explains it all in your case.
But "Pretty Park" doesn't ring the spyware bell... |
|
jvmorris
I Am The Man Who Was Not There.
Premium,MVM
join:2001-04-03
Reston, VA
| Tuuli,
Understood (and agreed). However, Pretty Park should have rung the NAV bell (and NAV is part of NIS 2003).
Again, I don't know the answer here; just suggesting possibilities for further investigation.
--
Regards, Joseph V. Morris |
|
Tuulilapsi
Kenosis
join:2002-07-29
Finland
| I-Worm.PrettyPark? Isn't that enormously old, from the last millennium? Certainly shouldn't be in the wild, nor disabling NIS...
I think it would help a lot if wysteriamo could find the site of that Pretty Park... thing. In a quick search, I've not been able to find any other references to Pretty Park than those related to the worm and one wacky Japanese site. 
You know, I'm starting to think your initial guess about RealOne SuperPass being the culprit might just be very accurate...
[text was edited by author 2003-06-04 17:07:32] |
|
wysteriamo
join:2002-11-01
Saint Louis, MO
|  reply to wysteriamo
Re: NIS03=donkeys
»service1.symantec.com/SUPPORT/ni···ml&tpre=
Big jerks.
"Norton Internet Security 2003 does not load on reboot after applying the 6.04 patch via LiveUpdate
Situation:
You have Norton Internet Security (NIS) 2003, Norton Personal Firewall (NPF) 2003, or Norton Internet Security Professional (NIS Pro) 2003 running on Windows XP (Home or Professional Editions). You recently ran LiveUpdate for NIS, NPF, or NIS Pro 2003 to download and install the 6.04 update. After LiveUpdate finished, you restarted the computer and noticed one or all of the following problems:
- The NIS, NPF, or NIS Pro 2003 icons are missing from the desktop and/or the SystemTray.
- When you open the program to enable NIS, NPF, or NIS Pro 2003 you are prompted that you must be a supervisor.
- Your computer runs much slower than usual.
- Programs take longer to open.
- The icons for your speakers are missing from the System Tray.
Solution:
Symantec is investigating this problem. The cause is unknown. This document will be updated if new information becomes available or a solution is found.
In the meantime, one of the following procedures might resolve the problem. Perform each of the following procedures in the order listed. Restart Windows after you complete each step to see whether the problem is solved. "
"...MIGHT RESOLVE THE PROBLEM...RESTART AFTER EACH STEP..."
I read the other thread & wholeheartedly agree with the poster who said "I'm very tired of being a guinea pig for Symantec". Amen brother.
I ran Spybot & see Real tracks all over it. I ran StartUpList & am reviewing that. I ran Symantec's Security Check & allegedly passed all except Browser Privacy Scan. It seems that rebooting was what set this into motion. Right now I'm overwhelmed & highly irritated. Not a great troubleshooting disposition. I'll be back in a while. |
|
wysteriamo
join:2002-11-01
Saint Louis, MO
| reply to wysteriamo
Trust no one
Not sure if this is a permanent fix, but it seems to be working now. I didn't do the Symantec "Solution" (delete Download folder).
Just Add/Remove Programs for Huge Home Runs Videos + Real One Player...SpyBot & checked to remove everything...reboot. NIS didn't auto start, but when I went into Start>>All Programs>>NIS>>NIS, everything's back to Enable.
At least I'm no longer surfing with flashy ads, with popups, & without a firewall. So, things are looking up.
=============EDIT====
I'm getting hammered w/ads...so I take it back.
[text was edited by author 2003-06-04 18:45:39] |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
| Pretty Park or something else?
wysteriamo: Were you able to remove the possible "Pretty Park" off your system? I am finding your conflicting reports if your problem was from NIS v6.0.4 LiveUpdate (LU) or something else.
The last version before v6.0.4.34 was v6.0.2.25. Only a few people have problems with v6.0.4 LU. NIS team hasn't narrowed down the pattern with the computer configuration (only Windows XP and NIS 2003 products v6.0.4.34).
Please let me know your status so I can follow-up.
[text was edited by author 2003-06-04 19:43:47] |
|
wysteriamo
join:2002-11-01
Saint Louis, MO
| Re: something else?
No, I don't believe I ever had the Pretty Park thing. At first I ran the update, rebooted, then scanned the whole computer. Not long after I noticed the NIS problems. Thanks to all here, I can trace the cause of the problem.
Everything's back to being disabled...settings cannot be changed...Symantec's Automated Support Assistant will not run. I now understand why Add/Remove isn't suggested.
I'm disappointed in Symantec. |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
|  wysteriamo: Actually, you should uninstall NIS and reinstall it, but don't get v6.0.4 LU for now. If it can't be uninstall, use RNIS and/or RNAV.
It would be helpful if you can send me your Belarc and other information in »Painful Norton LiveUpdate 3June03 thread.
[text was edited by author 2003-06-04 21:18:27] |
|
wysteriamo
join:2002-11-01
Saint Louis, MO
| You're being cute, right?
I'd thought about removing NIS, then reinstalling. Or perhaps using a Restore Point. Or even editing the Registry. (Scary because while I've looked thru the Registry, I've only used JV16 to "edit".)
I can't get into anything to uninstall anything. Closest I can get is Delete Download Folder, then Delete LU Folder---which can only be making things worse. Right now I'm trying to learn "How to restore WXP system files". Specifically the stuff I'm to type into the msconfig boxes.
»service1.symantec.com/SUPPORT/ts···osv_lvl=
Maybe I should just pay the $30 & give them a piece of my mind. |
|
antdude
A Ninja Ant
Premium,VIP
join:2001-03-25
| wysteriamo: I am not being cute/funny with this.
XP's restore point won't fix the problem because the files do not get archived with Windows system restore points. Use rnis and rnav if you can't uninstall NIS and its NAV from Add/Remove list or uninstall shortcut (Start Menu).
RNIS: »service1.symantec.com/SUPPORT/ni···nis&svy= (note rnav2003 link in it).
I wouldn't use registry editor since most registry data is encrypted for Symantec 2003 products.
--
-- Ant @ The Ant Farm: »antfarm.ma.cx |
|
