Can't run NAV LiveUpdate

virus

    Next

  • 1. I can not log on to my machine at all
    Dear all I run a scan with adaware and delete all the malware that the program showed After that i can not log in to my computer at all. When it starts up, and wait for the password, it wait half of second and then start to shut down. I can not log in even as administrator or in safe mode. Any ideas?
  • 2. How to find virus/worm/trojan on network client
    I am running a network-monitoring tool that pings my switches and servers continuously. Every hour on the 35 minute, I am suddenly unable to ping several of my Windows 2000 and Windows 2003 servers and Cisco switches. The switches all appear to be functioning correctly. This happens at 8:35, 9:35, 10:35, 11:35, and yesterday at 12:35. Then everything is fine until the next morning at 8:35. Could this be a workstation infected with a trojan? How would I go about finding out which client is infected? My intrusion detection devices are not detecting anything, but the signatures are often behind the curve. Workstations all have Trend OfficeScan installed, but it is difficult to know if all the machines that are on are up to date on the pattern file, since many workstations are only turned on once in a blue moon. Thank you in advance for any advice on how to start looking for the culprit.
  • 3. how to remove "windows onecare"?
    how to remove "windows onecare"? the remove program is not work!

Can't run NAV LiveUpdate

Postby UGFibG8 » Wed, 01 Sep 2004 07:57:04 GMT

Major viral attack on my PC over weekend since setting up BT Broadband. Was 
running Norton Antivirus 2003, stupidly without a firewall. 

Have now downloaded Norton Internet Security package (Antivirus 2004 + 
Firewall) which has stopped ongoing malicious attacks but now I can't access 
the Symantec website for virus definition updates or any kind of tech 
support. 

I presume a virus is blocking my attempts to get help, although my PC seems 
to be working OK otherwise.

Anyone got any suggestions? (note Matt has similar problem)

Re: Can't run NAV LiveUpdate

Postby UGFibG8 » Wed, 01 Sep 2004 18:39:05 GMT

Thanks Cris

I can connect to most other websites - only antivirus sites (also tried 
Sophos) seem to be inaccessible with message "Cannot display requested page 
etc...". Firewall settings seem OK.






Re: Can't run NAV LiveUpdate

Postby Cris » Wed, 01 Sep 2004 19:46:24 GMT

Can you access www.symantec.com ?

Option 1:

Run your antivirus in safe mode by pressing F8 key at boot. Go to normal
mode. Is your connection OK now?

Option 2:

IE / Tools / Internet options / Security / Restricted sites. Then check that
antivirus web sites are not in the list of restrictions. (Specially your
antivirus website.)

Option 3:

Use this list of links or any in GOOGLE ANTIVIRUS ONLINE and verify you can
connect these web sites. If so scan your PC using as many online antivirus
scans as you can. (Sorry if any of them is a dead link ...)

Symantec:
http://security.symantec.com/
http://security.symantec.com/ssc/home.asp
http://security.symantec.com/sscv6/default.asp

PANDA
http://www.pandasoftware.com/activescan/
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

kaspersky
http://www.kaspersky.com/scanforvirus

McAfee:
http://www.mcafee.com/myapps/mfs/default.asp
http://www.mcafee.com/
http://es.mcafee.com/root/mfs/scan.asp
http://us.mcafee.com/root/mfs/default.asp

Trend:
http://housecall.antivirus.com
http://housecall.trendmicro.com
http://housecall.trendmicro.com/housecall/start_corp.asp

BitDefender
http://www.bitdefender.com/scan/license.php

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

AntiVir
http://www.free-av.com/

avast! 4
http://www.avast.com/

Or:
www.trojanscan.com/
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
www.mrfreefree.com/free_software/free_online_antivirus.html
www.thefreecountry.com/security/antivirus.shtml
www.pcpitstop.com/antivirus/default.asp
http://www.ravantivirus.com/scan/
www.ravantivirus.com/
http://www.clamwin.com/

Option 4:

If possible, download, install, update and run in safe mode AVG 6.0 or 7.0
from:

http://www.grisoft.com/us/us_dwnl7.php
http://free.grisoft.com/freeweb.php/doc/2/

Option 5:

Delete history, cookies, temp files and bin.

Update the following programs and run them in safe mode preferrable (F8)

CWShredder - http://aumha.org/downloads/cwshredder.zip
Spybot S&D - http://www.safer-networking.org/en/index.html
Ad-aware - www.lavasoftusa.com
SpywareBlaster - http://www.javacoolsoftware.com/spywareblaster.html
Hijack this - http://www.spywareinfo.com/~merijn/downloads.html
a squared A2 "Trojan Remover" - http://www.emsisoft.com/en/
SpywareGuard - http://www.javacoolsoftware.com/spywareguard.html

AND some in http://www.spychecker.com/topdownloads.html

Solved or not? Please, comment now.

"Pablo" < XXXX@XXXXX.COM > escribien el mensaje
news: XXXX@XXXXX.COM ... >> Thanks Cris >> >> I can connect to most other websites - only antivirus sites (also tried >> Sophos) seem to be inaccessible with message "Cannot display requested
page >> etc...". Firewall settings seem OK. >> >> "Cris" wrote: >> >>>> Is your firewall configuration allowing Norton to get connected to the
Net? >>>> (Norton Internet Security / firewall / configuration / programs - AV
active) >>>> >>>> Any other problems with different web sites? >>>> >>>> >>>> "Pablo"<< XXXX@XXXXX.COM >> escribien el mensaje> Broadband.>


Re: Can't run NAV LiveUpdate

Postby Howard Harris » Wed, 01 Sep 2004 22:05:06 GMT




Have you checked your Hosts file? 

-- 
Howard 

Re: Can't run NAV LiveUpdate

Postby Cris » Thu, 02 Sep 2004 00:25:36 GMT

f possible, it would be helpful to know the name of the virus to look for
the adequate tool on the net (even using a friend's computer) to clean
yours...


"Cris" < XXXX@XXXXX.COM > escribien el mensaje
news: XXXX@XXXXX.COM ... >> >> Can you access www.symantec.com ? >> >> Option 1: >> >> Run your antivirus in safe mode by pressing F8 key at boot. Go to normal >> mode. Is your connection OK now? >> >> Option 2: >> >> IE / Tools / Internet options / Security / Restricted sites. Then check
that >> antivirus web sites are not in the list of restrictions. (Specially your >> antivirus website.) >> >> Option 3: >> >> Use this list of links or any in GOOGLE ANTIVIRUS ONLINE and verify you
can >> connect these web sites. If so scan your PC using as many online antivirus >> scans as you can. (Sorry if any of them is a dead link ...) >> >> Symantec: >> http://security.symantec.com/ >> http://security.symantec.com/ssc/home.asp >> http://security.symantec.com/sscv6/default.asp >> >> PANDA >> http://www.pandasoftware.com/activescan/ >> http://www.pandasoftware.com/activescan/com/activescan_principal.htm >> >> kaspersky >> http://www.kaspersky.com/scanforvirus >> >> McAfee: >> http://www.mcafee.com/myapps/mfs/default.asp >> http://www.mcafee.com/ >> http://es.mcafee.com/root/mfs/scan.asp >> http://us.mcafee.com/root/mfs/default.asp >> >> Trend: >> http://housecall.antivirus.com >> http://housecall.trendmicro.com >> http://housecall.trendmicro.com/housecall/start_corp.asp >> >> BitDefender >> http://www.bitdefender.com/scan/license.php >> >> F-Secure: >> http://support.f-secure.com/enu/home/ols.shtml >> >> AntiVir >> http://www.free-av.com/ >> >> avast! 4 >> http://www.avast.com/ >> >> Or: >> www.trojanscan.com/ >> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx >> www.mrfreefree.com/free_software/free_online_antivirus.html >> www.thefreecountry.com/security/antivirus.shtml >> www.pcpitstop.com/antivirus/default.asp >> http://www.ravantivirus.com/scan/ >> www.ravantivirus.com/ >> http://www.clamwin.com/ >> >> Option 4: >> >> If possible, download, install, update and run in safe mode AVG 6.0 or 7.0 >> from: >> >> http://www.grisoft.com/us/us_dwnl7.php >> http://free.grisoft.com/freeweb.php/doc/2/ >> >> Option 5: >> >> Delete history, cookies, temp files and bin. >> >> Update the following programs and run them in safe mode preferrable (F8) >> >> CWShredder - http://aumha.org/downloads/cwshredder.zip >> Spybot S&D - http://www.safer-networking.org/en/index.html >> Ad-aware - www.lavasoftusa.com >> SpywareBlaster - http://www.javacoolsoftware.com/spywareblaster.html >> Hijack this - http://www.spywareinfo.com/~merijn/downloads.html >> a squared A2 "Trojan Remover" - http://www.emsisoft.com/en/ >> SpywareGuard - http://www.javacoolsoftware.com/spywareguard.html >> >> AND some in http://www.spychecker.com/topdownloads.html >> >> Solved or not? Please, comment now. >> >> "Pablo"<< XXXX@XXXXX.COM >> escribien el mensaje> > news: XXXX@XXXXX.COM ...> > page> > Net?> > active)> > Broadband> >>>> > Wa> >>>>>> > running Norton Antivirus 2003, stupidly without a firewall> >>>>>> > >>>>>> > H

Re: Can't run NAV LiveUpdate

Postby UGFibG8 » Thu, 02 Sep 2004 10:13:04 GMT

ill take a while to get through all this. Much appreciated, will let you
know result.

regards

"Cris" wrote:


Re: Can't run NAV LiveUpdate

Postby Howard Harris » Thu, 02 Sep 2004 16:20:03 GMT




Start>Search>All files and folders>Look in - select your system drive and
search for Hosts

You may find several; in XP the one you want is
\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS  

Use notepad to open it. Usually this file will only contain the entry
127.0.0.1       localhost  - unless you have knowingly added to the list.
My guess is you will find a number of entries there of anti-virus web sites
- remove them.



Re: Can't run NAV LiveUpdate

Postby UGFibG8 » Mon, 06 Sep 2004 19:17:02 GMT

Thanks Howard and Cris

Panda free virus scan identified 6 or more viruses that Norton had missed. 
One of these was a qhost virus which writes IP addresses for the antivirus 
websites into the HOSTS file. Panda deleted these viruses which allowed me to 
run Norton liveupdate and download the updated version of LiveUpdate (v2.5) 
which automatically checks the HOSTS file for this kind of problem and 
deletes any entries that shouldn't be there.

Thanks for the advice, it's been an educational experience!







Re: Can't run NAV LiveUpdate

Postby UGFibG8 » Mon, 06 Sep 2004 19:33:02 GMT

ris

Panda found qhost.gen virus adding antivirus IPs to HOSTS file. Clearing
this allowed access to Norton sites and downloaded LiveUpdate v2.5 which
checks for probles with HOSTS file. Problem sorted!

Many thanks for your help

Pablo

"Cris" wrote:


Re: Can't run NAV LiveUpdate

Postby Howard Harris » Mon, 06 Sep 2004 21:23:56 GMT




Glad everything worked out - keep your firewall on :)


-- 
Howard 


Return to virus

 

Who is online

Users browsing this forum: No registered users and 64 guest