New User Having Problems With Nod32

Discussion in 'NOD32 version 2 Forum' started by lilliebet65, Feb 29, 2004.

Thread Status:
Not open for further replies.
  1. lilliebet65

    lilliebet65 Registered Member

    Joined:
    Feb 29, 2004
    Posts:
    15
    Location:
    UK
    Hi - Potted History of Problem

    Have new pc, running XP Home (not at all familiar with XP), couldn't set up AVG so Nod32 was recommended. Download seemed to go OK but when I tried to run a scan, the screen kept closing. Also tried downloading update, managed 99.9% then stalled. At the same time I started to have real problems with XP not responding. Eventually XP shut down, restarted and reported a serious error giving AV software driver as possible cause. Tried to uninstall Nod32 but couldn't. This AV has been highly recommended and I would like to sort the problem out rather than just look for a different product.

    Please be warned, I am a complete novice. Thanks in advance for any help you are able to give. :)
     
    lilliebet65, Feb 29, 2004
    #1
  2. dvk01

    dvk01 Global Moderator

    Joined:
    Oct 9, 2003
    Posts:
    3,131
    Location:
    Loughton, Essex. UK
    the usual reason for not being able to scan is a vbirus already on the computer that disables antivirus softwares and there are quite a few around

    go to http://www.merijn.org/files/HijackThis.exe and download 'Hijack This!'.
    make sure it is placed into it's own folder, not a temporary folder. Then doubleclick the Hijackthis.exe.
    Click the "Scan" button, when the scan is finished the scan button will become "Save Log" click that and save the log.
    Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.
    It will possibly show issues deserving our attention, but most of what it lists will be harmless or even required,
    so do NOT fix anything yet.
    Someone here will be happy to help you analyze the results.

    If Merijn.org is still down due to the DDOS attack on it, the alternative download sites for Hijackthis are:
    http://www.thespykiller.co.uk/files/HijackThis.exe
    http://www.sherrylynn.us/HijackThis.exe
    http://mjc1.com/mirror/hjt/
    http://www.majorgeeks.com/downloads31.html
    http://www.spywareinfoforum.com/~merijn/downloads.html
     
    dvk01, Feb 29, 2004
    #2
  3. lilliebet65

    lilliebet65 Registered Member

    Joined:
    Feb 29, 2004
    Posts:
    15
    Location:
    UK
    I ran HJT and lo-and-behold I think I've found my problem. I have Norton running. No idea where that came from o_O Did XP do this? Anyway, nothing was responding so I've used system restore to get back to a point where I can at least use the machine. HJT log looks fine but if you still want to see it I can post it. What I need to do now is find out where Norton is hiding. I'm guessing it was clashing with Nod 32 (and before that with AVG)? XP is taking some getting used to.

    Sorry to be such a burk :oops:
     
    lilliebet65, Feb 29, 2004
    #3
  4. dvk01

    dvk01 Global Moderator

    Joined:
    Oct 9, 2003
    Posts:
    3,131
    Location:
    Loughton, Essex. UK
    2 antiviruses nearly always clash and cause all sorts of problems

    you have to decide which AV you want running, are you sure norton ANTIVIRUS is running and not just system works or such or just the common files

    we don't want to leave you without antivirus protection
     
    dvk01, Feb 29, 2004
    #4
  5. lilliebet65

    lilliebet65 Registered Member

    Joined:
    Feb 29, 2004
    Posts:
    15
    Location:
    UK
    Thanks for this, I've investigated further and I'm not sure this is NAV after all. Can't pin down navap32.exe - does this mean anything to you?
     
    lilliebet65, Feb 29, 2004
    #5
  6. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,475
    Location:
    The Netherlands
    lilliebet,

    Seems the time has come to post your HJT log over on this forum - please do so.

    regards.

    paul
     
    Paul Wilders, Feb 29, 2004
    #6
  7. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Hi lilliebet65

    You mention it being a new pc, perhaps a trial version of Norton came pre-installed.

    Have you checked add/remove programs to see if it is listed there?

    Regards,

    CrazyM
     
    CrazyM, Feb 29, 2004
    #7
  8. lilliebet65

    lilliebet65 Registered Member

    Joined:
    Feb 29, 2004
    Posts:
    15
    Location:
    UK
    No it was definitely a baddie just got this lovely report back from Panda Scan


    Incident Status Location

    W32/Blaster.F.worm Disinfected E:\WINDOWS\system32\TFTP1032
    Even with the Blaster Patch I manage to get infected!!!!! Still want that log?
     
    lilliebet65, Feb 29, 2004
    #8
  9. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Are you behind/running a firewall? If not, enable the XP firewall for now.

    Probably would not hurt, just post in the forum Paul noted above and someone will check it out for you.

    Regards,

    CrazyM
     
    CrazyM, Feb 29, 2004
    #9
  10. lilliebet65

    lilliebet65 Registered Member

    Joined:
    Feb 29, 2004
    Posts:
    15
    Location:
    UK
    Hi there AGAIN, I'm running Zone Alarm and not being careless, just desperately trying to sort out my security. My previous machine was totally bomb proof (once I got the hang of all this security stuff at least). My big problem is trying to do this and deal with XP at the same time.

    Anyway, I've posted my log here http://www.wilderssecurity.com/showthread.php?t=23228

    if anyone wants to come along and have a good laugh, that is :)

    Many thanks for all help so far.
     
    lilliebet65, Feb 29, 2004
    #10
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...