Norton Antivirus Problem,any helpers?

Korny

Hey guys

I've been having a problem with NAV all week now,the '04 edition that it.

The problem lies with the live update feature,when I try to run live update it always fails,telling me to "verify that you can connect to the internet and retry",of course I am connected!

Whatsmore,if I try to go to symantec.com (the develpers website) I get a "This page cannot be displayed" error,the same happens if I click on any link related to that website,the things is:I can connect to every other website there is.

Any idea on what the hell's wrong with my comp?

Cheers

Zakalwe

This is suspicious. Check your hosts file and see if there's any reference to symantec in it c:\winnt\system32\drivers\etc\hosts.

It could be a virus or spyware that has tried to disable an anti virus scanner.

Scan here as your current protection may be compromised

http://housecall.trendmicro.com/

Also make sure to install and run spybot and adaware.

Korny

How exactly can I view my hosts file,what do I open it with that is?

And get this,using the link you provided there,a scan showed that the exact directory you noted is infected with a "DOS AGOBOT.GEN" virus,which is uncleanable apparently. Sounds like that's the problem alright,but if it's uncleanable what can I do?

Zakalwe

Open it in notepad. It's a simple text file.


Read up here on the virus and Symantec's reccomendations.


edit: WHOOPS. posting the link might have been a good idea


http://securityresponse.symantec.com/avcenter/venc/data/w32.gaobot.gl.html

ken90

Sounds like a virus all right.

Try clicking on the Google cache of Symantic.com

Here

If this loads and you cant load another page of the site, it's definately a virus.

Korny

Lol,I wondered where you meant!

Fixed now mate,with that link you gave me,thanks a million,you're a life saver.

Funny isn't it,the last thing you'd expect to become infected with a virus is your AV prog .

Coincedentaly,maybe you'd know why Zakalbe,but the worm that had infected my comp- Gaobot Gen,has infact been found by NAV on my computer on numerous occassions before,but,in actuality NAV was confusing the virus with winhlp32 in the system32 directory.

Both the virus and winhlp32 have similar filepaths and I just assumed that NAV was being overly sensitive.

D'you reckon it's purely a coincedence?

Thanks again for your help mate

Korny

Sorry to double post,but it seems I amn't allowed to edit my above post

In response to ken90,yeah it was a virus.

I can now connect to symantec.com no problem and have subsebquently updated my virus definintions. Thank for the link Ken90.

A virus that specifically target symantec eh?

Man,these virus fellas are smart...

cerbeus

A lot of the newer viruses and worms now target the Av or firewall product of most well known brands. The stop or disable where they can so that they can replicate themselves the next time someone connects to a computer or Internet.