Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

NORTON HIJACKS WSC!

4 views
Skip to first unread message

Sasha Gottfried

unread,
Jun 2, 2006, 5:27:15 PM6/2/06
to
Hi,

I suppose in the scheme of things this is no big deal but I'm fed up with
software that intentionally screws with other software...even if it's
Microsoft's. As I mentioned in an earlier post, I COMPLETELY REMOVED NAV
2006 form my new HP 1430n only to find that the Windows Security Center has
been 'tricked' into assuming it's still there!

Apparently this is not an isolated incident. Check out this article:
http://www.pcworld.com/news/article/0,aid,118979,00.asp

If someone knows a way around this (other than ignoring WSC anti-virus and
firewall alerts...or lack of them) it will be appreciated.

Thanks much,

Marc


optikl

unread,
Jun 2, 2006, 5:52:06 PM6/2/06
to

Didn't the process work which I provided to you under the other thread
you created?

Sasha Gottfried

unread,
Jun 2, 2006, 6:00:34 PM6/2/06
to
I tried REG Seeker...also did a complete registry and file search (manual)
deleting every symantec and Norton file. Did not try the JV 16 Power Tool.

Marc


"optikl" <opt...@ioptikl.net> wrote in message
news:vLGdnbS88oSaLh3Z...@comcast.com...

optikl

unread,
Jun 2, 2006, 6:30:27 PM6/2/06
to
Sasha Gottfried wrote:
> I tried REG Seeker...also did a complete registry and file search (manual)
> deleting every symantec and Norton file. Did not try the JV 16 Power Tool.
>
> Marc


I can't speak to the product you tried, so you may wish to try jv16. I
believe there is a 15 day free trial. If this doesn't work, it costs you
nothing.

Dustin Cook

unread,
Jun 2, 2006, 6:58:05 PM6/2/06
to
"Sasha Gottfried" <sas...@comcast.net> wrote in
news:Su-dnYI9gcipMB3Z...@comcast.com:

> Hi,
>
> I suppose in the scheme of things this is no big deal but I'm fed up
> with software that intentionally screws with other software...even if
> it's Microsoft's. As I mentioned in an earlier post, I COMPLETELY
> REMOVED NAV 2006 form my new HP 1430n only to find that the Windows
> Security Center has been 'tricked' into assuming it's still there!

Hi again, Sorry the previous advice offered by Optik and myself didn't work
for you, You can try this instead:

http://www.kellys-korner-xp.com/regs_edits/securitycenterrestore.reg
Copy and paste the contents into a new file with notepad, save this as
"fixsecurity.reg" or whatever, and double click. Regedit will ask if it's
okay to do this, tell it yes and let us know how it works for you.

This registry file for those interested should reset the security center
back to the way it was originally.


--
Dustin Cook
http://bughunter.atspace.org
BugHunter MalWare Removal Tool

Sasha Gottfried

unread,
Jun 2, 2006, 11:57:59 PM6/2/06
to
Thanks....HP claims the only way to indo this is to re-install service pack
2. I'll let you know if I have any luck with JV.

Marc


"optikl" <opt...@ioptikl.net> wrote in message

news:l9qdnUo8vfeYIR3Z...@comcast.com...

Sasha Gottfried

unread,
Jun 3, 2006, 12:14:02 AM6/3/06
to
Dustin,

I clicked the link and it sent me to a save (or run) option. There doesn't
seem to be any way to "copy and paste." It just asks if I want to add to the
registry. I said yes, rebooted, but WSC still sees Norton as fully installed
and scanning. Did I proceed correctly?

Marc

Dustin Cook

unread,
Jun 3, 2006, 9:21:12 AM6/3/06
to
"Sasha Gottfried" <sas...@comcast.net> wrote in
news:b5GdnfPM-pUNkRzZ...@comcast.com:

> Dustin,
>
> I clicked the link and it sent me to a save (or run) option. There
> doesn't seem to be any way to "copy and paste." It just asks if I want
> to add to the registry. I said yes, rebooted, but WSC still sees
> Norton as fully installed and scanning. Did I proceed correctly?
>
> Marc

How irritating...Not you, Norton :) Yes, you proceeded correctly. Alright,
lemme do some reseearch. In the mean time, try reinstalling service pack 2
and lets see how that goes.

Sasha Gottfried

unread,
Jun 3, 2006, 11:46:57 AM6/3/06
to
Dustin,

Reinstalling service pack 2 did not work, perhaps because this is an
HP...I'm not sure but it wouldn't boot back into normal mode. There was no
listing of SP2 in the add-remove programs therefore we couldn't uninstall it
first.... so the tech-support person had me just install SP2 over Windows.
But on restart it just kept booting back and forth.

Fortunately, Safe Mode was available and the restore point that SP2 set up
prior to installation got us back. Maybe there is some HP recovery disc you
have to use to reinstall SP2? Thanks for staying with this?
Marc


"Dustin Cook" <bughunte...@gmail.com> wrote in message
news:Xns97D75F282BA...@69.28.186.121...

Dustin Cook

unread,
Jun 3, 2006, 6:26:50 PM6/3/06
to
"Sasha Gottfried" <sas...@comcast.net> wrote in
news:M8OdnUYr0-luMxzZ...@comcast.com:

> Dustin,
>
> Reinstalling service pack 2 did not work, perhaps because this is an
> HP...I'm not sure but it wouldn't boot back into normal mode. There
> was no listing of SP2 in the add-remove programs therefore we couldn't
> uninstall it first.... so the tech-support person had me just install
> SP2 over Windows. But on restart it just kept booting back and forth.
>
> Fortunately, Safe Mode was available and the restore point that SP2
> set up prior to installation got us back. Maybe there is some HP
> recovery disc you have to use to reinstall SP2? Thanks for staying
> with this? Marc

Did service pack 2 installation complete succesfully? Doesn't sound like it
did. I don't see why you'd need any sort of recovery cd to reinstall a
service pack, no. When you removed the norton program, did you try the
symantec removal tool offered on the website? It comes with a large .reg
file and a vbs script. (At some point they removed the direct download exe,
so I was forced to ehh, play along with the "online" version, it actually
downloads a reusable exe and a reg and vbs file). If you can't locate it,
just email me and I'll send it to you.

No problem. Hopefully we'll get this resolved for you soon.

Sasha Gottfried

unread,
Jun 3, 2006, 9:50:38 PM6/3/06
to
Hi,

We tried the symantec removal tool (symNRT) as well as the manual tools (on
the bottom of that page).
It's befuddling considering that nothing named Symantec or Norton now
appears in the registry...but there it is in WSC indicating it is fully
operational!

Thanks,

Marc

Yes....I


"Dustin Cook" <bughunte...@gmail.com> wrote in message

news:Xns97D7BBAB5F4...@69.28.186.121...

optikl

unread,
Jun 3, 2006, 10:45:31 PM6/3/06
to
Sasha Gottfried wrote:
> Hi,
>
> We tried the symantec removal tool (symNRT) as well as the manual tools (on
> the bottom of that page).
> It's befuddling considering that nothing named Symantec or Norton now
> appears in the registry...but there it is in WSC indicating it is fully
> operational!
>
> Thanks,
>
> Marc

Do a search in the registry under HKLM for "security center". See if
there is a entry of Symantec. Let me know what you find.

edgewalker

unread,
Jun 3, 2006, 11:04:59 PM6/3/06
to

"optikl" <opt...@ioptikl.net> wrote in message news:ac2dnRR076nN1B_Z...@comcast.com...

:))

So does the "security center" only display, as active, that which you tell it to
display through data in the registry? Rather odd for a program with "security"
in its name. I would think that actually checking for the existence of the program
as a scheduled process before being displayed as active would be far more
appropriate.


Sasha Gottfried

unread,
Jun 3, 2006, 11:24:00 PM6/3/06
to
Nothing in the registry for security
center..........%SystemRoot%\system32\wscui.cpl is the target from
accessories shtcut.

Marc

"optikl" <opt...@ioptikl.net> wrote in message
news:ac2dnRR076nN1B_Z...@comcast.com...

Dustin Cook

unread,
Jun 4, 2006, 10:44:16 AM6/4/06
to
"edgewalker" <nu...@null.invalid> wrote in
news:1284jit...@corp.supernews.com:

>:))
>
> So does the "security center" only display, as active, that which you
> tell it to display through data in the registry? Rather odd for a
> program with "security" in its name. I would think that actually
> checking for the existence of the program as a scheduled process
> before being displayed as active would be far more appropriate.

AFAIK, Yes. It's a microsoft product, security wasn't the original idea.
Perhaps a false sense of it? :)

edgewalker

unread,
Jun 4, 2006, 11:53:42 AM6/4/06
to

"Dustin Cook" <bughunte...@gmail.com> wrote in message news:Xns97D86D3F623...@69.28.186.121...

> "edgewalker" <nu...@null.invalid> wrote in
> news:1284jit...@corp.supernews.com:
>
> >:))
> >
> > So does the "security center" only display, as active, that which you
> > tell it to display through data in the registry? Rather odd for a
> > program with "security" in its name. I would think that actually
> > checking for the existence of the program as a scheduled process
> > before being displayed as active would be far more appropriate.
>
> AFAIK, Yes. It's a microsoft product, security wasn't the original idea.
> Perhaps a false sense of it? :)

Funny the OP blames Norton for WSC's inability - it is hardly the fault of
an uninstaller to correct WSC's lies.

Oh well ... no love lost on either company IMO. :))


Sasha Gottfried

unread,
Jun 4, 2006, 12:55:02 PM6/4/06
to
There must be some kind of file in: "%SystemRoot%\system32\wscui.cpl" that
contains the bogus information.
But it's beyond my ability to decipher.

Marc


"edgewalker" <nu...@null.invalid> wrote in message
news:12860kg...@corp.supernews.com...

Alt Beer

unread,
Jun 4, 2006, 4:43:24 PM6/4/06
to

"Sasha Gottfried" <sas...@comcast.net> wrote in message
news:EcKdnZpsbMDsoR_Z...@comcast.com...

> Hi,
>
> We tried the symantec removal tool (symNRT) as well as the manual tools
(on
> the bottom of that page).
> It's befuddling considering that nothing named Symantec or Norton now
> appears in the registry...but there it is in WSC indicating it is fully
> operational!
>
> Thanks,
>
> Marc


Try running MSCONFIG maybe a program being started at start-up


Sasha Gottfried

unread,
Jun 4, 2006, 4:59:40 PM6/4/06
to
Thanks....we disabled all startup items......no change in WSC.


"Alt Beer" <nu...@null.nul> wrote in message
news:MBHgg.8739$lQ....@newsfe3-gui.ntli.net...

Dustin Cook

unread,
Jun 5, 2006, 1:32:10 AM6/5/06
to
"Sasha Gottfried" <sas...@comcast.net> wrote in
news:pNOdnYws_qkg1B7Z...@comcast.com:

> Thanks....we disabled all startup items......no change in WSC.

I haven't forgotten about you. I'll be checking into this at work tomorrow.
I have been busy pruning BugHunter's pattern file.

bughunte...@gmail.com

unread,
Jun 6, 2006, 12:56:50 PM6/6/06
to

Sasha Gottfried wrote:
> Thanks....we disabled all startup items......no change in WSC.

I have not been able to duplicate the problem your having here at
work... I'm still looking into it, so I'll be in touch.

--
Regards,
Dustin Cook
http://bughunter.atspace.org

Sasha Gottfried

unread,
Jun 6, 2006, 1:49:12 PM6/6/06
to
What about replacing the WSC file: "%SystemRoot%\system32\wscui.cpl" with a
fresh extracted copy of that file?

Marc


<bughunte...@gmail.com> wrote in message
news:1149613010.3...@h76g2000cwa.googlegroups.com...

Message has been deleted

Sasha Gottfried

unread,
Jun 11, 2006, 10:41:21 AM6/11/06
to
Dustin,

Are you still looking in to this?

Thanks,

Marc


"Dustin Cook" <bughunte...@gmail.com> wrote in message

news:Xns97D9FA1159D...@69.28.186.121...

Dustin Cook

unread,
Jun 11, 2006, 8:26:21 PM6/11/06
to
"Sasha Gottfried" <sas...@comcast.net> wrote in
news:wZ6dnREXyLwJthHZ...@comcast.com:

> Dustin,
>
> Are you still looking in to this?
>
> Thanks,
>
> Marc

Yes. I've been deliberatly trying to cause the error, so I can see about
fixing it. So far, no luck. Norton uninstalls itself okay and doesn't seem
to screw up WSC.

I have one suggestion so far, Try reinstalling the norton package, either
the same thing or a newer version, then uninstalling it properly thru
add/remove programs.

Please let me know what it does.

Dustin Cook

unread,
Jun 11, 2006, 8:27:38 PM6/11/06
to
Stuart Krivis <j...@mongo.krivis.com> wrote in
news:hhgj825hgj2u4kfhn...@4ax.com:


> I thought that I'd mention that I've seen this before after doing
> trials of AV and personal firewall software. I never found a good
> soution. Everyone just said that WSC is badly broken by design. :-)

It's a poor design, true that. However, it has to be a fixable condition.
Likely one or more registry keys. Just a matter of getting the error to
happen so I can tinker. :)


> Just FYI, someone just posted a thread in this newsgroup on 6/4 about
> having an identical problem with WSC after installing and removing
> Comodo AV...

Yep, I tried causing the error by doing what the poster did. No such
luck...

Dustin Cook

unread,
Jun 11, 2006, 8:28:45 PM6/11/06
to
"edgewalker" <nu...@null.invalid> wrote in
news:12860kg...@corp.supernews.com:

> Funny the OP blames Norton for WSC's inability - it is hardly the
> fault of an uninstaller to correct WSC's lies.

Since the installer made modifications to WSC to make it lie, the
uninstaller is at fault for not undoing that. Not the Poster.

Sasha Gottfried

unread,
Jun 11, 2006, 11:01:15 PM6/11/06
to
Dustin,

The version of Norton came pre-installed on this HP 1430n. The 60-day trial
is over. Is there a trial version with the same configuration available that
you know of?

Thanks,

marc

"Dustin Cook" <bughunte...@gmail.com> wrote in message

news:Xns97DFCFEF7AA...@69.28.186.121...

edgewalker

unread,
Jun 12, 2006, 4:31:34 PM6/12/06
to

"Dustin Cook" <bughunte...@gmail.com> wrote in message news:Xns97DFD05693D...@69.28.186.121...

> "edgewalker" <nu...@null.invalid> wrote in
> news:12860kg...@corp.supernews.com:
>
> > Funny the OP blames Norton for WSC's inability - it is hardly the
> > fault of an uninstaller to correct WSC's lies.
>
> Since the installer made modifications to WSC to make it lie, the
> uninstaller is at fault for not undoing that. Not the Poster.

I see that point. I assumed too much about how the suckurity center
worked. So, it trusts whatever info is fed to it as being the actual case
instead of actually checking for a specific scheduled process - and this
problem is really no different than an uninstaller neglecting to remove a
system tray icon - except that it is interpreted by the user as much more
important.

I wasn't blaming the poster :)) I was assuming that a security application
wouldn't so easily allow information it displays (in a security context) to
be manipulated by other programs.

I suppose someone could write a program so the security center displayed
that the household toilet is running. :))


Raid

unread,
Jun 27, 2006, 6:33:10 PM6/27/06
to
"Sasha Gottfried" <sas...@comcast.net> wrote in
news:4MCdnZVwS7xgRRHZ...@comcast.com:

This is old, but anyway.. You can try downloading the latest trial copy
of Norton; and then uninstall it. It *should* revert WSC back to the way
it was originally.

--
Regards,
Dustin
Sites I find interesting:
http://www.boycottriaa.com
http://p2pnet.net

0 new messages