Forum Home
Press F1
 
Thread ID: 68383 2006-04-26 09:39:00 Norton2006 Ango (10308) Press F1
Post ID Timestamp Content User
449698 2006-04-26 09:39:00 I recently puchased and loaded Nortons anti virus 2006 onto my computer. Since then, if I leave my computer on for any length of time and go onto the internet ( I have Broadband) nothing will load. It cant find my home page or my email or any other web site unless I reboot the computer.
Any suggestions.
Ango (10308)
449699 2006-04-26 10:06:00 Do you use a Router or Modem?
And let me know the ISP please?
Thank you.
Maybe I can help you with that if you provide more detailed information.
MTLance (6768)
449700 2006-04-26 10:35:00 Do you have a firewall on your computer? Have you updated your NAV 2006's signature to the latest one? Have you read through PF1's Spyware / Adware FQA? -> pressf1.pcworld.co.nz 16

Post us a HJT log if possible. If you don't understand what HJT is, our PF1's great Speedy Gonzalez will explain to you in a few minutes time. ;)

Cheers :)
Renmoo (66)
449701 2006-04-26 10:43:00 Thanks for info JamesKan. That might work but a little too complicated I thing I have the same problem too but my idea is different from this dunno why. MTLance (6768)
449702 2006-04-26 21:01:00 Hmm, if the AV includes the firewall, the firewall has a habit of disabling / turning off the Proxy service it uses.

And when the Proxy service shuts off / disables itself, guess what happens next?

It also stops you browsing the internet, and checking email. Until u restart the service.
Speedy Gonzales (78)
449703 2006-04-27 09:59:00 Thanks for all your help so far. I have a fairly high spec computer running windows XP pro. I am on broadband and using a DSL Modem with Ihug. I tried the Hijack thing which scanned comp and fixed some errors but still have the same proplem.
Regards Ango
Ango (10308)
449704 2006-04-27 10:19:00 If u have XP, go to control panel / admin tools / services .

Look for Symantec proxy service (I think this is what its called) .

I dont have any Symantec programs on this now . Make sure its started, and not stopped .
Speedy Gonzales (78)
449705 2006-04-27 10:49:00 Logfile of HijackThis v1.99.1
Scan saved at 9:45:13 p.m., on 27/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Fast.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\taskswitch.exe
C:\WINDOWS\System32\fast.exe
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\D-Link\DSL-200\dslstat.exe
C:\Program Files\D-Link\DSL-200\dslagent.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\ASHAMPOO\ASHAMP~1\PopUpKiller.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3K 2.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Angus Lyall\Local Settings\Temp\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.nzcity.co.nz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ncs-ltd.co.nz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = home.nzcity.co.nz
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: IE PopUp-Killer ; Neikeisoft - {49E0E0F0-5C30-11D4-945D-000000000003} - C:\PROGRA~1\ASHAMPOO\ASHAMP~1\PopUp.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\System32\taskswitch.exe
O4 - HKLM\..\Run: [FastUser] C:\WINDOWS\System32\fast.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo RX510] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3K 2.EXE /P24 "EPSON Stylus Photo RX510" /O6 "USB001" /M "Stylus Photo RX510"
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [DSLSTATEXE] C:\Program Files\D-Link\DSL-200\dslstat.exe icon
O4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\D-Link\DSL-200\dslagent.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [TaskTracker] "C:\Program Files\TaskTracker\TaskTracker.exe" -m
O4 - HKCU\..\Run: [Ashampoo PopUpBlocker] C:\PROGRA~1\ASHAMPOO\ASHAMP~1\PopUpKiller.exe
O4 - HKCU\..\Run: [EPSON Stylus Photo RX510] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3K 2.EXE /P24 "EPSON Stylus Photo RX510" /M "Stylus Photo RX510" /EF "HKCU"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
O8 - Extra context menu item: Open Picture in &Microsoft PhotoDraw - res://C:\PROGRA~1\MICROS~2\Office\1033\phdintl.dll/phdContext.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.ncs-ltd.co.nz/
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - go.microsoft.com
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - www-secure.symantec.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{B702F666-1CC1-48D4-9B4A-4563F6F8293C}: NameServer = 203.0.178.191
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZONELABS\vsmon.exe

Pasted logfile, if this means anything.
Ango
Ango (10308)
449706 2006-04-27 11:28:00 For HijackThis analysis, look up my signature below. Otherwise, wait for a few hours for other PF1 members to help you to decipher it.

Cheers :)
Renmoo (66)
449707 2006-04-27 12:07:00 Hey Ango,
They can't help you. I don't think is Norton product problem, it's Ihug maybe.
1. Sometimes when my router show I'm connected to the internet but access web page with page cannot be displayed which normally can display like www.msn.com (http://www.msn.com).
2. Got to ADSL Router Modem login page and see if connected and it shows yes.
3. Don't worry about my ADSL Router Modem because it was bough a few days ago.
4. Restart the Router by shutting the ADSL Router Power or disconnected the USB cable if using D-Link DSL-200. The after a while just connect back in the USB and redial. It should work but not very offen happening again.
5. I haven't phone Ihug about this problem because I'm kinda busy and Ihug takes kinda long you know.

P.S. I don't think that is NAV fault if you try my method. If you still have the same problem please let me know, but please phone Ihug about this problem OK? To see whether is their fault.;)
MTLance (6768)
1 2