Norton Security Scan wont remove! used the Norton tool too!

I installed Adobe fireworks and while installing i was not paying attention (i know, i know). well i missed the part where it asked if you want to install Norton Security Scan (clicked through) and i just caught a glimps of it but it was too late! installed!
i uninstalled it using the usual add/remove programs and it just reinstalled itself on reboot (malicious). so i went and downloaded the removal tool from the Norton website. used it and still it comes back after reboot. thought maybe i missed something so tried 2 more times (3 total). this thing would not go away.
i start the hunt and delete registry (run/runonce) entries, and found and deleted the nssstub.exe (install program) and its directory. rebooted and still it tries to install. only now there is nothing to install (error on every boot). i am running startup monitor and it tells me that the NSinstaller is trying to register the program nssstub.exe for startup. meaning the installer is trying to reinstall Norton Security Scan. i went into the registry and deleted this key from the run services once under HKEY_LOCAL_MACHINE. to my dismay the startup monitor pops up again right away with the same message. delete the key again to verify and it does it again.
my problem is i cant figure out where this is running from. there is no program on my system that i could find called SNinstaller. this is embeded somewhere! i removed the directory that Adobe installed.
can someone help?

Norton/Symantic has gone too far!!!

thnx
Dan

 

revo uninstaller
Try this link and see if it helps

 

Can you go back before you installed Adobe using restore point in safe mode.

 

i used revo with the same results..
as for the restore point, i would be better formatting and reinstalling everything as it was a relatively new install at the time and the restore point was set after but before i realized what i had done..
as far as i know this is a simple matter of finding and deleting the program that is running it.. just cant find it!!

thnx

 

the thing i hate about norton (and every other anti-virus software that you have to pay for) is that they create the viruses them selves just to get you to keep paying for the software and possibily upgrade to their most expensive program

there are some anti-virus freewares out there that are more loyal to it's users and can remove viruses easily i use avast and it has never failed me yet and spybot search and destroy is a great program too it will remove all the spyware that avast cannot detect

 

Uninstall Adobe fireworks, that should remove Norton with it.

Then use CCleaner to clear out the registry bits, if any remaining with the removed install.

Finally reinstall Adobe Fireworks. I'm sure you will look every install screen over carefully. I'm in the habit of always selecting custom install rather than default just so I can pick what is going to be dumped or not dumped on my computer.

 

already did that! it was the second last thing i did and reinstalled without Norton crap.. did no good. i use ccleaner all the time.

like i said i removed the install program itself but there appears to be a self installing program that checks for it on start up, that tries to activate the installer (removed). this is somewhere i cant find. its impeded in something without reference to itself and keeps trying to reinstall, but cant because the installer is gone.. im trying to stop this annoying nag on start up. oh and it installs a key in the registry pointing to the installer i removed. if i remove the key it detects it and re installs it..
i hope that makes sense!
basicly the installer has been removed, Norton has been removed but there appears to be a program that checks for the security scan and when it cant find it it tries to activate the installer to reinstall itself.


thnx

 

no luck with safe mode using Norton Removal Tool!
reboot message back...
:cry
thnx

 

I have installed Noton on several computers and it never installed a virus. I don't know where you would come up with that statement, unless you used a patch of some description. Personally I hate Norton, because I think it is resource hungry. I use Eset Security.
To reply to one of the other posts, surly it is easier to go back with restore point than rebuilding no matter how new, you will at least get rid of the referance to the particular file in the registry. Then in Explorer go to tools and folder options, click view, and tick Show hidden files and folders, untick hide extensions. Then do a search for the file in question, if it has hidden itself it should be able to be found now.
One other point I would add, I have a new build with all updates to all my programs "Office, Windows, Anti virus" as well as the most important programs I use, to the particular date I made the build Backed up to a separate partition, now in the event of something catastrophic going wrong I can have the new build back in 12mins. I also do incremental backups at various times and can renew from any of those points. I use Acronis True Image.
I think this is good practice for any one. Even if you Don't have the space to do this IT does not take a very big partition to make an Image of the New build, I use the DVD size chunks making the backup and then burn them to DVD. You are supposed to be able to burn directly making the backup, but I have found they are always corrupt, don't know why. So I use free software called Infra Recorder to burn them from the disk. Another great free program, never had a bad burn with it.

 

I found this at the Symantec forum. It was posted Dec. 31 2008

 

great find plotr.
i removed the scheduled task than when i removed the registry entry startup monitor pops up right away saying nssinstalation is changing the registry. meaning it put back the registry entry to install itself.. again nsstub.exe and the directory have been removed so nothing to install. there is not program that i could find called nssinstalation.
the hunt continues!!

thnx

 

If I were you, I'd post at the symantec forum.
http://community.norton.com/norton/board?board.id=other

Here's the thread http://community.norton.com/norton/...&thread.id=6787&view=by_date_ascending&page=2

just add to it and post what you posted here.

 

One other method you could try then is to inoculate the registry with something like Spybot as soon as you remove the references to the file from the registry. You could also scan with this prog and it may find the file for you, but in any case if it tries to change the registry it will ask you and you can deny it. Should keep you out of trouble untill you find a proper solution. If spybot finds the file well that should be the end of your problem.

Hope this helps.:wave

 

i use spybot, and startup monitor and have denied the program using it but it still runs..
startup monitor pops up and as soon as it is denied it just pops up again right away.
as for finding the program that is running! that's what i am trying to find but have yet to. it does not show in the start up menu or the registry so i cant figure out what the actual program name is. its not in the scheduled tasks either.

please people, keep in mind that Norton security is not on my system but something left behind that checks to see if its there and when its not it tries to activate nsstub.exe which is the install program for norton security. the install program has been removed so it can not install. it just annoys me every single time i reboot.

thnx

 

I was thinking from one of your previous posts that you knew the name of the file not porgram you were looking for.

Many File Managers inherits the Show Hidden Files and Folders or Hide protected operating system files from Folder Options settings in Windows. If a virus is still active in memory, it will keep on changing the settings to disable you from viewing hidden and system files. You could try FreeCommander which is free and able to show you all hidden files and folders as well as protected operating system files no matter what is the settings in Folder Options. It actually ignores the permission in Folder Options! It is portable, so you can also copy the whole extracted folder to your USB flash drive.

 

I have been having the exact same problem except I got "infected" from the new shockwave 11 install. After reading all your info I think I was able to figure out how to fix this (though not exactly why it works).
I uninstalled Norton through windows uninstall.
Then removed NSSSTUB.exe and nssstub which is a text doc (just to make sure it was all gone).
I think the part you missed was deleting the directory C:\programs files\common files\symantec shared\nsssetup. That's where the program is being held I believe.
Then I ran the Norton Removal Tool for good measure and no more NSS or messages on restart. Give it a try and see what happens. Hope it works for you as well!:-D

 

Always customize your downloads. I did have the same problem lets hope I fixed it. I dont even deal with Norton anymore.. AVG works just fine for me. Remove anything that has Norton/symantec in your system under the registry. I then removed the scanner & shockwave from add/remove programs.. cleaned out my cookies/my cache/history and sorts. Proceeded to reinstall the shockwave checking everything on the download. BAM no more security scan!!

 

Hey Folks

I found the same thing on my machine last evening.

Spybot tried to scan it. nssstub.exe asked for internet access and I denied it using Zone alarm

I found this critter here

"C:\WINDOWS\system32\Macromed\Shockwave 10\nssstub.exe" /download

thanks to all you guys..

Napper505 :-D

P.S. Dont let your kids install software while your not lookin rolleyes

 

Hi folks,

I'm having much the same problem as the above, this time with NSS piggy-backing in on a DivX update, which I didn't see coming, but there you go... The issue I'm having, though, is that it won't even let me uninstall it using change/uninstall before I can do all the cleaning out of the registry and removing other references as you suggest above. When I hit 'uninstall', it comes up with an option to scan now or uninstall and when I hit the latter it tells me that it can't validate the install, so can't uninstall it and I need to run a windows update. When I do that, it only gives me two optional programs to add, neither of which would appear to be in any way relevant.

Any help would be gratefully appreciated!

Best wishes,

Anthony

 

This may (or may not) help. Found it surfing.

1. Click on start menu
2. Click on run
3. type in regedit, then click ok
4. This will open a window, find the folder named “HKEY_LOCAL_MACHINE” and expand it
5. find the folder named “SOFTWARE” and expand it
6. find the folder named “MICROSOFT” and expand it
7. find the folder named “WINDOWS” and expand it
8. find the folder named “CURRENTVERSION” and expand it
9. find the folder named “RUNONCE” and expand it
10. find the NSS file right click on it, then click delete
11. restart your computer and it will be gone for good.

Hope it works for you. I, too, had installed a divx update and the next day found nss waiting to install. Did not click on it. It installed itself. I immediately uninstalled it. It may or may not be useful, but I am suspicious of any software that intrudes itself without my permission. I like Norton and use it, but I reserve the right to install at my discretion what I choose. Anyway, if the above doesn't help, I do hope you find a solution. I am not having any further problems. Best of luck.

 

Hi Gunas,

Many thanks for the help. My main problem is what turns out to be a dodgy install, which means that it's there but claims not to be validated and therefore won't uninstall itself! I've contacted Norton and they're being very helpful, although they can't replicate the problem themselves, but I'm sending screenshots and various other things as they work it through. If all that fails, I'll certainly give this a go so, as I say, many thanks.

Best wishes,

Anthony

 

go on norton website click on chat some one took remote control of my computer and took it off nothing else worked thanks to to the norton technician its gone