Norton Internet Security Problems

[Skippy88]

Having just upgraded to Norton Internet Security 2004 I am a bit disappointed to say the least that when I run AntiVirus is says there are no viruses present however when I run Symantecs online virus scan it tells me that Backdoor.Oblivion is present! I can't find a way to remove it. Has anyone experience of this??

[Boris]

http://securityresponse.symantec.com/avcen...r.oblivion.html

To remove this Trojan, delete files detected as Backdoor.Oblivion, and remove any values that it added to the registry, or references to it from the System.ini and Win.ini files.

To remove the Trojan:

Run LiveUpdate to make sure that you have the most recent virus definitions.

Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files. For instructions on how to do this, read the document How to configure Norton AntiVirus to scan all files.

Run a full system scan.

Write down the file names of any files that are detected as Backdoor.Oblivion and then delete them.

To edit the registry:

CAUTION: We strongly recommend that you back up the registry before you make any changes to it. Incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the keys that are specified. Read the document How to back up the Windows registry for instructions.

Click Start, and click Run. The Run dialog box appears.

Type regedit and then click OK. The Registry Editor opens.

Navigate to each of the following keys:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

In the right pane, look for lines that refer to the files, such as ZipLoader32.exe, that were detected as Backdoor.Oblivion, and delete any such values that you find.

Click Registry, and then click Exit.

To edit the System.ini and Win.ini files:

This needs to be done only on computers that are running Windows 95/98/Me.

NOTE: (For Windows Me users only) Due to the file-protection process in Windows Me, a backup copy of the file that you are about to edit exists in the C:\Windows\Recent folder. We recommend that you delete this file before you continue with the steps in this section. To do this using Windows Explorer, go to C:\Windows\Recent, and in the right pane select the Win.ini file and delete it. It will be regenerated as a copy of the file that you are about to edit when you save your changes to that file.

Click Start, and click Run.

Type the following, and then click OK.

edit c:\windows\win.ini

The MS-DOS Editor opens.

NOTE: If Windows is installed in a different location, make the appropriate path substitution.

In the [windows] section of the file, look for an entry similar to the following:

load=

Select the entire line. Be sure that you have not selected any other text; then press Delete.

In the [windows] section of the file, look for a line similar to the following:

run=

If it exists, select the entire line. Be sure that you do not select any other text; then press Delete.

Click File, and click Save.

Click File, and click Exit.

Click Start, and click Run.

Type the following, and then click OK.

edit c:\windows\win.ini

The MS-DOS Editor opens.

NOTE: If Windows is installed in a different location, make the appropriate path substitution.

In the [boot]section of the file, look for an entry that refers to the file that was detected as ZipLoader32.exe. Delete this reference.

NOTE: If the reference is part of the line

shell=explorer.exe

delete only the text to the right of the .exe, so that, when you are done, this line reads only:

shell=explorer.exe

Click File, and click Save.

Click File, and click Exit.

[Boris]

You can also try aSquared Free Trojan Scanner.

http://www.emsisoft.com/en/software/free/

This can detect and clean 22,000 odd trojans and other malware.

[andsome]

You can also try aSquared Free Trojan Scanner.

http://www.emsisoft.com/en/software/free/

This can detect and clean 22,000 odd trojans and other malware.

Updated today

[Skippy88]

Thank you but I had already tried this. Any other ideas??

Sorry to explain more. The link tells you to update NAV (which I have done) delete the files deteced by it to contain Backdoor.Oblivion.

However it doesn't detect any!

Navigate to each of the following keys:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

In the right pane, look for lines that refer to the files, such as ZipLoader32.exe, that were detected as Backdoor.Oblivion, and delete any such values that you find.

It doesn't show any!

:down:

[Skippy88]

Thanks everyone that seems to have got shot of it. Not sure why it gets detected online but not by NAV though, whats the point of buying the software if you have to do a manual online check to find viruses??

A more minor problem is that although the tray icon is present for AntiVirus there is no tray icon for Internet security even though opening the program says it is running and it is confgured to have a tray icon. It only appears if I switch off preotection and then restart protection. :unsure:

[nellie2]

Skippy88 have you looked here ?? Any good??

[Skippy88]

Thanks for the link Nellie but it refers to SystemWorks rather than Internet Security. I think I'll have to uninstall and reinstall but that was a nightmare when I did it earlier!! :angry: :(

[Skippy88]

After taking nearly four hours to delete and reinstall I still have no system tray icon for Internet security. Why don't things just work like they should?%*$!*&? :angry: :angry:

[nellie2]

Perhaps you should contact Norton.... for a bit of support!!

http://www.symantec.com/region/reg_eu/tech...rt_options.html

[Guest Rebel=UK=]

you made sure its enabled in the options?

i have looked and the option is available (Norton Internet security 2004 pro)

[Skippy88]

Yes the option is enabled but the icon does not appear at start up. It only appears if I deselect the tray icon option than reset it. :(

[Agent Smith]

Hello Skippy88,

I see from your profile that you are using XP. Is there a possibility that Norton is actually loading, but is being hidden by the XP system tray?

Down by your clock, in the bottom left hand corner, you should see two little arrows, which will expand out the system tray. Is Norton actually running there?

Mr. M.

[nellie2]

:oops: Why didn't I think of that!!!!!!! :huh:

[Guest ellas]

:lol: