Computer Virus

NAVIGATION
CATEGORIES
REFERRENCE
LINKS
  • Norton Internet Security 2005 behaving strangely - is it compromised?

    3 answers - 2746 bytes - related search similar search Add To My Delicious Add To My Stumble Upon Add To My Google Mark Add To My Facebook Add To My Digg Add To My Reddit

    Following a recent trojan virus attack which despite the presence of NIS and
    AV 2005 caused some problems which included the destruction of many links
    from desktop and menu items to programs despite me quarantining and deleting
    the trojan which had started opening up all sorts of windows in Internet
    Explorer
    I rescued my data which was well backed up and decided to reformat the
    computer.
    Its a Dell Dimension 8300 with a Sata Raid drive combination with a mirror
    set up.
    I did a complete reformat of the two hard drives and reset them as Mirror
    drives then reinstalled Windows XP downloaded all the updates then installed
    all my programs again including NIS/AV 2005.
    This incidentally was a downloaded version bought off the Symantec web site
    early last autumn.
    However, odd things have started to happen:
    If I am on line for a lengthy period between say 30 minutes and 2.5 hours -
    it appears to vary the outgoing mail scanner fires up and starts scanning
    phantom outgoing mail to odd addresses I don't recognise!
    is definitely not mailing these messages - nothing in the sent
    folder. It has even happened when isn't running.
    A Symantec error message is generated and shows the email address none of
    which are recognised by myself.
    When this happens a number of the small scanning windows open up and if left
    will fill the screen, the small scanning symbol starts to fill up the tool
    bar with multiple copies.
    If one tries to stop it or if one leaves it gets a Microsoft C++ Pure
    Virtual function call in the file ccAPP.exe which is in the symantec
    directory error R6025
    After this error happens looses its ability to communicate with the
    mail servers unless the computer is rebooted - though normal internet
    connectivity doesn't appear affected and browsing can continue.
    I have contacted Symantec on Friday and they got back to me today - the
    respondent must have mis read my discription and assumed that AV was timing
    out on messages I was sending. But as I stated - I wasn't sending any!
    They also suggested I run the Norton checks off the symantec site both the
    online Virus Scan and the Security scans returned a clean bill of health
    even though one of these phantom scans started up during the on-line virus
    scan!
    But obviously something is wrong - what is triggering the scans of these
    phantom emails - I am seriously concerned about the integrity of my PC and
    am starting to loose faith in Norton Internet Security and AV for which I
    have used for many years.
    Any ideas ? Solutions?
    Thanks
    John
  • No.1 | | 334 bytes | |

    John L wrote:

    If I am on line for a lengthy period between say 30 minutes and 2.5
    hours - it appears to vary the outgoing mail scanner fires up and
    starts scanning phantom outgoing mail to odd addresses I don't
    recognise!

    So you are part of a spammer's bot network?

    What does your firewall say?
  • No.2 | | 323 bytes | |

    So you are part of a spammer's bot network?

    What does your firewall say?

    I don't actually think any messages other than what I genuinely send are
    going out.

    The ones that appear when scanning are rather unusual looking addresses and
    I think the same ones.

    John

  • No.3 | | 270 bytes | |

    Something else odd happened when I left Norton AntiVirus running yet again.
    Another error popped up
    navapsvc.exe application error
    Instruction at 0x7c918 referred memory at 0x00000010
    The memory could not be written
    John

Re: Norton Internet Security 2005 behaving strangely - is it compromised?


max 4000 letters.
Your nickname that display:
In order to stop the spam: 4 + 3 =
QUESTION ON "Computer Virus"

EMSDN.COM