LegTwister wrote:Good morning Yank.....I was confused as I usually am with trying to be safe...which leads me to being uncertain...which leads to me thinking!
So...things "seemed" fine after moving to 21.1.1.7 two days ago. I wake my computer this morning and I have "Unable to connect to Symantec help server. Please check your internet connection." It appears the full scan ran w/o issues. I try to run LiveUpdate and I got the 180+mb update, re-booted. Next attempt to run Live update failed. Back to bummer mindset.
If you ran LiveUpdate and got 180MB update you were connecting to the Norton server - so the messasge yo rcieved upon awaking your system was errrorenous. You said you rebooted - after just the download part or after it had gone thru the entire LiveUpdate process. You said next attempt to run LiveUpdate failed - any error message or perhpas because ti was already running (or had been interupted by the reboot (depending on when you did the reboot)?
Sequence in general: Times MST. Full scan complete @ 12:15. Tune Up OK, Windows temp files OK, then within a 2 minute window 20 "Unauthorized Access blocked (Open file) msgs 14 of which had Norton in the "target" Actor for each was windows\system\svchost.exe. Disk optimization OK, then submit Norton error submission of many errors was completed.
That is nothing to worry about - it is somethng that occurs quite a few times with Norton Tamper Protection - it is Norton protecting itself. I have literally thousands of those entires in my Norton Tamper Protection History.
Computer went to sleep. Upon waking I saw the noted notice about my connection. I ran an update and the virus defs didn't complete other updates were fine. Norton submission of the errors was made. Next was Statistical Submission: Suspicious: Cloud.9 exonerated
It is not unusual for Virus defs not to complete - can be any of a few reasons, Norton server glitches, your ISP connection dropping out, an error in the defintion processing itself (?). The key to their failing is that they do eventually download and complete. Sometimes they have to download a complete set- which makes for the large downloads perhaps like the 180 MB you mentioned.
A full scan was run @ 7:15am (I don't think I started it) and completed w/o issues. @ 7:18 a quick scan was cancelled but it actually errored. I ran a quick scan w/o issues after that. @ 8:04 "Unauthorized Access blocked" Access process data. Same actor as above with target:Program files(x86\Norton 360\Engine 21.1.1.7\buIH.exe. @8:14 ...blocked...\cltLMH.exe.
Tried aLive Update and it failed and then a block occurred ...\buIH.exe.
Once again, this sounds like the Norton Tamper Protection doing it's job, although not sure about why Quick Scan would error - any idea what the error was?
In regards to LIveUpdate failing, the rule of thumb is to try again. I usually try once or twice immediately after it fails and then about every hour or so following the failure. Norton suggests waiting 24 hours before trying it again.
I will do everything you tell me to do! I do not have saved passwords, use the cloud, not sure about the vault, etc. Should be OK for???Whatever you suggest and I have the time to do it now.
IMHO, all of what you have seen and are worried about is normal. It sounds like right now the only problem you may have is that LiveUpdate is not totally working. Have you manually tried to run LiveUpdate since this AM? Any luck?
As I mentioned in your other thread - the green checkmark is the indication you need to look for. If it is green you are OK. The detections you are concerned about are nothing more than Norton doing it's job. If ll is green - and LiveUpdate is completing now, you should not have to do the reinstall etc!