Norton 2010 got me infected

[codyw]

FYI - I was using Norton IS 2010 and today I used another security product since I was having a lot of trouble with my license with Norton. KIS 2011 found at least 5 Trojans, Exploits, Viruses, etc. that Norton never told me about in past scans done with it.
I couldn't believe it and still can't. KIS 2011 seems really nice - I see quite a bit of improvements on the product.

 

[JMH]

FYI - I was using Norton IS 2010 and today I used another security product since I was having a lot of trouble with my license with Norton. KIS 2011 found at least 5 Trojans, Exploits, Viruses, etc. that Norton never told me about in past scans done with it.
I couldn't believe it and still can't. KIS 2011 seems really nice - I see quite a bit of improvements on the product.

cody,
Care to elaborate on what your computer protection is currently - & was when you were "let down by Norton."

What is your motive re starting this thread? Do you require help or are you just venting?

Please fill in your system specs also. Instructions for doing so are just below my signature.

Thanks.
Jan.

 

[codyw]

No, I don't need help, thanks, just letting out the word. Recently, a friend told me that there is some viruses/malware that Symantec just cannot block for some reason. I'm not sure if this was that or not but nothing detected it on my system, not Malwarebytes, Hitman Pro, Spybot - S&D, nothing! I was shocked because SONAR as well as Norton itself seems to be good at detecting that kind of stuff. Very surprised.

Using Windows 7 Home Premium

 

[JMH]

No, I don't need help, thanks, just letting out the word. Recently, a friend told me that there is some viruses/malware that Symantec just cannot block for some reason. I'm not sure if this was that or not but nothing detected it on my system, not Malwarebytes, Hitman Pro, Spybot - S&D, nothing! I was shocked because SONAR as well as Norton itself seems to be good at detecting that kind of stuff. Very surprised.

Using Windows 7 Home Premium

cody,

Safe surfing & avoiding the nasties depends on ever so many things.
Do you want / need more information about this?

 

[Wishmaster]

KIS is a good AV but keep in mind...

If all those programs came up clean as you say, there is a very high probability KIS may be reporting a false positive.
It may be set to agressive for example.
I not saying this is the case, but if every other detection method comes up clean .. it certainly is probable.


Never had any issue with Norton myself.
If theres a problem with activation, calling them up would resolve it. They are usually quite helpful in such matters.

 

[codyw]

Here is where all the infections were found:

1. documents and settings/cody williams/appdata/local/temp\jar_cache5390507557026593874.tmp/MessageManager.class
2. documents and settings\cody williams\appdata\local\temp\jar_cache8302119197927724196.tmp/aa549daeeb4.class
3. documents and settings\cody williams\appdata\local\temp\jar_cache5390507557026593874.tmp/WWWManager.class

The other 2 that were found were also in the same place.

 

[Wishmaster]

I believe those are tempory Java Files.

 

[mindinka]

Oh Dear...

CodyW, cheerup man! I had the same situation when I had Java on my PC, AVG-free Edition, later ESET passed the viruses to temporary folder for Java and that's where .jar files stay. Let me ask you? Do you really need Java on your PC? If yes that you should be prepared for this, if not then uninstall it. I am not using it, and I don't remember the last time I had virus or trojan, KIS 2011 does protect me as well as I protect myself from myself...

 

[codyw]

So all those threats found in the temporary Java files were harmless?

 

[Wishmaster]

Im not saying they were entirely harmless. Only that they seem to be java temps.


I can not say if they were truly trojans or not, but If all the other programs show as clean, and KIS was the only one that flagged as a trojan however, it is possible its just being overprotective and giving a false positive.

Perhaps others may be more experienced in such things and can offer more insight.


In any case, being a TEMP file it will hurt nothing by deleting them, even if they were safe. Better safe than sorry.


If you like and want to stick with KIS, I would suggest sending those files to Kaspersky for evaluation and see what they say for curiosity sake.

Most AVs should have a option like this to help determine real threats from false positives.

 

[codyw]

I just might look into that. Thank you.

 

[malexous]

Before you switched to Norton, Malwarebytes found some items Kaspersky missed and when installed Norton found more items.

It just reinforces the fact that no anti-virus is 100%.

Did you pursue this any further?

 

[Solarstarshines]

I stopped useing Norton a long time ago anything you do touch or try with-in reason is a virus for Norton

I got sick of norton and all the bull crap it used to say even with legit programs and games i got notifacation

So im sadly surprised there still going because they honestly mess you up more then help you out and that is what we get for useing commercial Anti Virus they might look good but they actually suck ......


I use Webroot Spy sweeper with Anti Virus not the best but way better then Norton this is my fourth year useing Webroot

 

[SledgeDG]

In case, you get another Warning and want to find out if it's a real thread or another false positive, just upload the file in question to virustotal.com
There it will be checked against 38 (or so) different AV strings.
Even tho the result technically still gives you no 100% safety, it'll give you a good idea if it's a false positive or not.
BTW : I trust my comp to Avast free (for ~4 years now ) Granted, Avast has its fair share of false positives but it's by no means a pita like NIS
-DG

 

[Corrine]

Here is where all the infections were found:

1. documents and settings/cody williams/appdata/local/temp\jar_cache5390507557026593874.tmp/MessageManager.class
2. documents and settings\cody williams\appdata\local\temp\jar_cache8302119197927724196.tmp/aa549daeeb4.class
3. documents and settings\cody williams\appdata\local\temp\jar_cache5390507557026593874.tmp/WWWManager.class

The other 2 that were found were also in the same place.

Wishmaster is correct. The findings were in the Java cache.

You need to do two things. First, make sure that you have only the latest release of Java installed on your computer. In Add/Remove programs, uninstall any Java programs with J2SE or Java Runtime Environment in the name that are not Java SE Runtime Environment (JRE) 6 Update 21.

You can obtain the most recent install at this download link: Java SE Runtime Environment 6u21

Note: UNCHECK any pre-checked toolbar and/or software options presented with the update. They are not part of the software update and are completely optional.

Next, I suggest you clear temp files. Download TFC by Old Timer from here (direct download): http://www.itxassociates.com/OT-Tools/TFC.exe

• First, save any files as TFC will close ALL open programs including your browser!
• Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
• Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
• Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

TFC (Temp File Cleaner) will clear out all temp folders for all user accounts (temp, IE temp, java, FF, Opera, Chrome, Safari), including Administrator, All Users, LocalService, NetworkService, and any other accounts in the user folder. It also cleans out the %systemroot%\temp folder and checks for .tmp files in the %systemdrive% root folder, %systemroot%, and the system32 folder (both 32bit and 64bit on 64bit OSs). It shows the amount removed for each location found (in bytes) and the total removed (in MB).

TFC requires a reboot immediately after running. Be sure to save any unsaved work before running TFC.

 

[codyw]

I didn't pursue anything further after that. I just stuck with Norton because it seemed to find some hidden viruses. I still have it and am still using it and don't seem to be running into anymore problems. I am running Malwarebytes on a daily basis and noting is being found so that's good. I play some games on my PC but not a whole lot and I do a lot of emailing and browsing and don't hear too much out of Norton but I know that it's protecting me and it's ON. I don't get alert messages about programs launching or asking permission through the firewall like I did with Kaspersky.

Before you switched to Norton, Malwarebytes found some items Kaspersky missed and when installed Norton found more items.

It just reinforces the fact that no anti-virus is 100%.

Did you pursue this any further?

 

[Maxxwire]

No, I don't need help, thanks, just letting out the word.

I know whereof you speak in that NIS 2008 did the same thing to my Vista computer that is letting in a big fat Trojan Downloader. I replaced Norton with Comodo Firewall Pro, Proactive Defense+ HIPS and Sandboxie with no black list Antivirus and I haven't had a single detection since from any of the conventional or cloud on demand scanners that I use not even so much as a tracking cookie thanks to Sandboxie x64 which works great with my Win 7 desktop.

~Maxx~
.

 

[codyw]

I did hear that the Norton products from 2008 and earlier had a detection that varied. I am still using the 2010 version and I have also seen great reviews on it.

 

[Maxxwire]

After tasting the freedom of having complete control of whatever runs on the desktop and through the firewall and running my browser in an isolated virtual space where nothing gets into the computer unless I authorize it I just couldn't go back to running Norton on autopilot.

~Maxx~

 

[Wishmaster]

After tasting the freedom of having complete control of whatever runs on the desktop and through the firewall and running my browser in an isolated virtual space where nothing gets into the computer unless I authorize it I just couldn't go back to running Norton on autopilot.

~Maxx~

Actually, you can set Norton up this way as well, if you prefer.
The Smart Firewall, or autopilot is just the default setting.

You can change all of this however.
The firewall will alert you to anything coming or going and request permission.

Unless you make a rule for specific applications, it will always ask.