• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Is Norton even WORKING?!?

My computer slowed down to a crawl; and after trying a bunch of things; I just ran a several-hours long scan.  To my HORROR, here's the report:

Total scanned      3,797,425
Files and directories      3,794,045
Registry entries    800
Processes and startup items    1,828
Network and browser items    666
Other    4
Trusted files    26,677
Skipped filed    22,881


Total security risks detected    988
Virus    871
Tracking cookies    11
Heuristic virus    106

Total security risks resolved    735
Virus    673
Tracking cookies    11
Heuristic virus    51

Total security risks requiring attention    253

Norton is SUPPOSED to be on guard 24/7 and it's doing the Live Updates, like it's supposed to.  So how the h_ll  did my computer have 198 UNRESOLVED viruses and 57 heuristic viruses ?!?!  WHAT has Norton been doing all this time?   Yeah, I know, taking care of the 673 viruses it resolved -- but nearly 200 UNresolved viruses?!?  If it's on guard, how did this happen?!  (After fixing the 7-8 the log said it needed to quarantine, which I directed it to do, what becomes of the 190 unresolved ones -- that were not listed as 'red, need addressing' in the long list of viruses handled? 

My hardware reaches the internet through a (wired) router and a secured modem... I don't go to weird sites. I use a medium-big name ISP and Comcast cable. When Norton warns me off a site; I don't go there.  I'm not happy about 871 detected viruses; but not actually that surprised.  I am VERY unhappy about Norton not dealing with so many!  Is that not what Norton is SUPPOSED to be doing?!

Oh, and my computer is still crawling...seems like it's scripts and video, or maybe a hard drive (two-year-old PC, Win 7 Pro); so I'm guessing it's NOT an infection that's slowing it.

Replies

Kudos1 Stats

Re: Is Norton even WORKING?!?

Hello

Please run a scan with the free version of Malwarebytes to get a 2nd opinion.

Download the free version, install and update then run a FULL scan.


You can find Malwarebytes here
https://www.malwarebytes.org/dl-confirm/
Malwarebyttes 3 has been made to run along side Norton and other 3rd party security programs.

 https://forums.malwarebytes.com/topic/191650-malwarebytes-30-frequently-asked-questions

All you have to do is disable the trial in Settings>Account. That will disable the live time settings also. There is also another Setting to stop the program from starting with Windows. So only 2 settings to change to make the program be a on - demand scanner as previously in version 2.

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Is Norton even WORKING?!?

Scan logs would be interesting (indicating the paths of the files that were found). The information provided is amazing, but not convincing.

I'm sure these are "sleeping" files, non-active threats (Norton active protection work fine). 

Kudos0

Re: Is Norton even WORKING?!?

All: I'd like to ask Elanor about this:

My hardware reaches the internet through a (wired) router and a secured modem... I don't go to weird sites. I use a medium-big name ISP and Comcast cable.

Elanor. Have you changed the default factory login username AND password for your Comcast device? Also have you also changed the SSID, default passcode for the wireless side of your WiFi on the Comcast device? Is your network connection "type" set at "private" vice public. And are you logged into the computer under an admin account?

If you would please share a screenshot of what Malwarebytes actually detects as well as the last Norton scan log here. These are the instructions to post screenshots directly into your posts. We can review them and better understand what suggestions to give you going forward.

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Home / Professional x 64 version 1903 / build 18362.239 / N360 Deluxe 22.17.3.50 / Norton Core v.282 on Android 2.00
Kudos0

Re: Is Norton even WORKING?!?

@Elenor

I also have a simple question re: "My hardware reaches the internet through a (wired) router and a secured modem... I don't go to weird sites. I use a medium-big name ISP and Comcast cable."

Are you using an ISP other than Comcast for your internet (which one) and using Comcast for Cable Only?

Kudos0

Re: Is Norton even WORKING?!?

I've attached the Norton scan results.  The list doesn't give any dates -- could it be that Norton has been all along putting the 'bad stuff' into a Trash folder that does not show up in T-bird itself?

T-bird obviously is my local email program (I use POP).  (I regularly scan and delete all the trash folders... I have 6-8 email addresses, each with their own folder-sets.)  I am, however, very surprised to find 'Trash' and 'Junk' folders on the E:\drive, and one file is 1.2 TB (!) large.

"D" drive is where (well, SHOULD be where!) my T-bird holds the mailboxes and folder-indexes and all such data. (Why there is any T-bird folder on the E:\ drive is baffling and will be attended to.

"Z" drive is an external hard-drive back-up.  (Synchback throws 'everything changed' there every night. Carbonite also backs up everything through the day; so it, no doubt, has the same files:  will be attended to.)

I never open attachments with .zip or .jar. I open SOME .pdfs, if they are from regular customers or my distributors; but Norton scans them and says they're okay before I do.

File Attachment: 
Kudos0

Re: Is Norton even WORKING?!?

Here's the Malwarebytes report -- it only found 3?!  I had it quarantine those; rebooted, and ran it again: no problems reported.

Oh sorry -- here's the data:

=====================

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 5/25/19
Scan Time: 9:04 AM
Log File: 92bec726-7eed-11e9-9a49-e0d55e2228f4.json

-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.586
Update Package Version: 1.0.10766
License: Trial

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: CyberBoreal\Elenor

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 284765
Threats Detected: 3
Threats Quarantined: 3
Time Elapsed: 2 min, 30 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 1
Adware.Hicosmea, HKU\S-1-5-21-3335268846-38422066-212297652-1000_Classes\WOW6432NODE\CLSID\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}, Quarantined, [3949], [185983],1.0.10766

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 2
PUP.Optional.StartPage24, C:\USERS\ELENOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\IGM0HTYC.DEFAULT\EXTENSIONS\FFEXT_BASICVIDEOEXT @ STARTPAGE24 . XPI, Quarantined, [4650], [186354],1.0.10766
PUP.Optional.RemoteInjectionFF, C:\USERS\ELENOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\IGM0HTYC.DEFAULT\EXTENSIONS\ARTUR.DUBOVOY@ GMAIL .COM . XPI, Quarantined, [1759], [680966],1.0.10766

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

Kudos0

Re: Is Norton even WORKING?!?

(Added the MalWareBytes data in my answer above.)

" Have you changed the default factory login username AND password for your Comcast device? "

Yes. Well, sort-of?    The NETGEAR FAQ had this (which I have copied into my router log (when I change stuff/get a new one, I update it -- so I can figure out what's what later.

Can I change the router login username to something other than admin?
No, the router login username cannot be changed. Only the admin password can be changed

So, I change the password (about yearly), when I do all my passwords, but the SSID / name is what they gave it. Netgear set the wireless connection at WPA2-PSK[AES] which NetGear describes as 'acceptably safe.'   Under Advanced settings, I have turned off the wireless signal from the router from 8 p.m. to 9 a.m. every day. (My phone has to use wireless, cause I don 't get usable cell signal out here...)

I have my computer wired to the router; the router wired to the modem. The router does wireless -- as my tablet and phone connect that way -- but the CPU is wired in. (I even TRF pix and files to the phone and and sometimes to the tablet by hooking a wire into the CPU!  Not a luddite, I just play one in.... security things...  when I can!

The network / computer is set to private; and alas, I am still logging in as administrator because I'm still finishing set-up on the newish computer... but I've turned off all sharing (there is only the one computer in the house, so the "network" is CPU -> router -> modem ->plugged into wall -> Comcast.

Update:

Getting edumacated thanks to all-y'all folks! Just enabled Wireless isolation.

Kudos0

Re: Is Norton even WORKING?!?

InMotion Hosting is my ISP; all connection to the internet is through the Comcast cable.

Is "Comcast for Cable Only" some sort of special connection or program?  I'm not fond of Comcast (no surprise), although mostly, they've actually been pretty good  -- rare downtime, good speed -- it's only when something goes weird and you need help that they're completely useless!  I cut the (TV) cable a couple years ago and have only high-speed internet running into the house.

Kudos1 Stats

Re: Is Norton even WORKING?!?

When you move an email message from the Inbox to the Trash folder, the message is not actually deleted.  What happens is the original message is hidden and a duplicate is created in Trash - so now it actually exists twice.  Norton will find any threats in these when you run a scan.  You need to compact folders in Thunderbird to physically delete them.  Since you have large files/folders involved, there is a danger that compacting, if it hasn't been done regularly, could corrupt your email folders.  I would backup your email to a thumbdrive just in case, disconnect it from the PC, empty the Trash, then compact your folders in Thunderbird and run another Norton scan.  Compacting should successfully remove the messages that Norton was alerting to.  See the following:

http://kb.mozillazine.org/Compacting_folders

Kudos0

Re: Is Norton even WORKING?!?

I did not read every line of your Norton Scan results. But almost all of the ones I did look at were found in your email  profile. Mostly in trash. So have you recently been receiving a lot of unsolicited email that you have just been deleting?  If so, Norton would not have scanned something that is not opened. When you did a full system scan, these items were scanned and provided the results you saw.

The large number may also have something to do with the duplication you found in Thunderbird folders on different drives. If those T-bird folders are copies of your active profile, the same files would be detected each time, which increased the detection count.

Things happen. Export/Backup your Norton Password Manager data.
Kudos2 Stats

Re: Is Norton even WORKING?!?

Norton would not scan deeply into a compressed file attachment when a message is downloaded due to the effort and time it would take.  Auto-Protect will block anything malicious on access anyway, so there is no loss of protection if email is not scanned on receipt.  It looks like most of the detections were of this nature, so as long as you did not open the attachments you could not be infected (and if you did, Norton would block the malware and you would still be safe).

This thread is closed from further comment. Please visit the forum to start a new thread.