Norman Virus Control and TDS-3

[Longthing]

Found out, when testing Norman Virus Control, that NVC (among other entries that should not be removed) removes the startup entry of TDS-3 in the registry (HKLM/..../Run) when removing a virus. In my case a couple of samples wich i saved on my harddisk.

I will also contact Norman about this and hope they will fix it.

In the meantime users of NVC in combination with TDS-3 should be aware.

[Jooske]

Hello Longthing,
thanks for the warning! Doesn't it ask confirmation before doing so and no recovery button?

[Longthing]

No, it only warned for the virus and asks me what to do with it.. When you choose for remove the registry entries are also removed.

In my case Adwatch kicked in so i could prevent it.

[Jooske]

Wondering which viruses would use the tds registry settings. And if Process Guard would have stopped that action too.
Good to warn Norman about this behavior so they can change their work somwhat.

[Longthing]

Norman also removes entries to files like syntplpr.exe and syntpenh.exe. If these files aren't lauched at startup my touchpad doens't function proberly.

I quess Norman sees these files as randomly choosen file names and therefor suspicious.

[Jooske]

They should exclude them from their deletion list, maybe if found in other places then their default place, or maybe you have setting options to exclude them!