Re: symantec website

From: Chuck (none_at_example.net)
Date: 04/30/04


Date: 29 Apr 2004 19:20:12 -0500

On Thu, 29 Apr 2004 16:23:22 -0700, "stacey"
<anonymous@discussions.microsoft.com> wrote:

>I cannot connect to symantec website using windows xp. I
>have norton antivirus and firewall, but cannot do live
>updates because when I try to sign on to symantec website,
>I get rerouted to lycos. Does anybody know what this
>could be. I also, tried to go on norton website and when
>I click on technical support the same thing happens. ?????

Stacey,

This sounds like a dns or browser hijack.

Search your entire system drive, including hidden and system folders, for file
"hosts". There is one legit copy, in C:\WINDOWS\system32\drivers\etc\. The
others are bogus, and part (but just part) of the problem. Also, examine the
contents of the legit copy, using Notepad, too.

Try these free online virus scans:
<http://www.bitdefender.com/scan/license.php>
<http://www.pandasoftware.com/activescan/com/activescan_principal.htm>
<http://housecall.trendmicro.com/housecall/start_corp.asp>

Now check for, and learn to defend against, additional carriers of infection.

First, download LSP-Fix and WinsockXPFIx from <http://www.cexx.org/lspfix.htm>,
and CWShredder from <http://www.majorgeeks.com/download4086.html>. All are
free.

Next, run CWShredder. Have it fix all variants.

Now check for, and remove, spyware. Get HijackThis
<http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<http://www.safer-networking.org/index.php?page=download>. Both free.
1) Install and run Spybot. First update it ("Search for updates"), then run a
scan ("Check for problems"). Trust Spybot, and make all recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately. Save the
HJT Log.
3) Have your HJT log interpreted by experts at one or more of the following
forums (and post it here):
<http://forums.net-integration.net/>
<http://www.spywareinfo.com/forums/>
<http://forums.tomcoyote.org/>
<http://www.wilderssecurity.com/>

If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and / or WinsockXPFIx.

Harden your browser. There are various websites which will check for
vulnerabilities, here are three which I use.
http://www.jasons-toolbox.com/BrowserSecurity/
http://bcheck.scanit.be/bcheck/
https://testzone.secunia.com/browser_checker/

Harden your operating system. Check at least monthly for security updates.
http://windowsupdate.microsoft.com/

Block possibly dangerous websites with a Hosts file. Three Hosts file sources I
use:
http://www.accs-net.com/hosts/get_hosts.html
http://www.mvps.org/winhelp2002/hosts.htm
(The third is included, and updated, with Spybot (see above)).

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.



Relevant Pages

  • SpyBot S&D
    ... My existing version of SpyBot won't download any updates & their ... website www.safer-networking.org has gone down. ... Is this the end of SpyBot S&D? ...
    (microsoft.public.windowsxp.general)
  • Re: trojansssssss
    ... Spybot S&D has an install routine - run ... First update it ("Search for updates"), ... Spyware Warrior: ... Don't install software based upon advice ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Access is denied after applying security updates
    ... I am pleased that my website works for you as it means that the ... But wen I switched it ON, I saw the bar and allowed my page for popup. ... But when I deleted the updates I could popup again ... ... So I deleted the installation of the above updates and now it works again. ...
    (microsoft.public.windowsupdate)
  • Re: Brief poll, your preferred spyware?
    ... You can still get the updates. ... > HiJackThis (the ultimate spyware removal tool. ... >> widely known that AdAware and Spybot are the current big two...and ... >> McAfee now has one. ...
    (microsoft.public.windowsxp.general)
  • Re: Cant send/rec e-mail - ?reinstall?
    ... Again, can use Internet OK, but can't update AdAware, ... SpyBot etc. (can't on ... scan shortly after seeking/installing updates (also ... > download updates. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)