lkearny - May 13, 2005 - 6:46 pm
I have an Apple iBook three and a half years old, and I'm running MacOS 10.3.9. I've lived a blissfully virus-free life up to now. I have the Norton Solutions package and the Norton Personal Security application. (All this because I went to DSL and a wireless home network.)
Two OS system updates ago, I started getting this message every time I booted up my system:
"Norton Personal Firewall: Startup Error
Due to a system error, access attempts will not be logged or displayed. (sysctl 0)"
I still get frequent messages from Norton when websites attempt to obtain my ss#, password or partial credit card number. But I am guessing this is a function of Norton Personal Security, not the firewall.
Over the last couple of days I have gotten several messages saying
"Norton Antivirus Security Alert: swapfile 1 is infected with Hacktool.Underhand. It could not be repaired." When I read what a Hacktool was, I got concerned.
I finally found Symantec's page that told what to do (courtesy of Google, not Symantec) and have done it. Except for locating and deleting the offending file in Quarantine - I am unaware of any quarantine, and Norton Help never heard of it either. Is there some secret code here?
Beyond that I'm still worried -
Is my Firewall working? Is there a Mac firewall that is operating that I don't know about, and they're arm wrestling each other for dominance? If no, what should I do to make sure I have a firewall in place? Can I just turn off Norton and trust OSX?
Many thanks if you can unconfuse me and help me secure my computer.
- Lynn K
Cheryl - May 14, 2005 - 7:49 am
Lynn,
My name is Cheryl and I will be assisting you.
First, Norton Personal Firewall and OS X's firewall are indeed fighting with each other. You do not need Norton's Firewall.
You will need to uninstall Norton Internet Security and Personal Firewall. You can use the Norton CD to do this.
In OS X, go to the System Preferences (light switch in the dock) and select Sharing. Now click on the Firewall button. If it shows Firewall off, click on the start button.
Next go to the Network Panel (in System Preferences) and select Ethernet built in from the Show pull down menu, then click on Proxies. At the very bottom is Use Passive FTP mode. Make sure that box is checked.
As for the AntiVirus - you still can use it - and should if you send or receive email from windows users. The viruses that are out there do not affect the Mac, but you can unknowingly get a virus from spam or a windows user, then send it to others.
As I recall, you can install just the Anti Virus part of the Internet Security by selecting custom install.
The quarantine of files is within AntiVirus. You can open Norton AntiVirus, and at the side are the various sections of AntiVirus. If they do not show when you open Anti Virus, click on the Show Tools button. Click on Quarantine. A new window will open. At the lower left is a padlock. Click on it to unlock it. You will be asked for your password - this is your user password for the computer. Now you can click on the file name and click on delete.
Hackers and Virus creators would rather work to disable the major operating platform rather than play with the minority at this point. You need not worry about the security of your system using OS X. Just remember to install the security updates released from Apple using Software Update.
--------
Let me know if you need further assistance and thank you for using MacOSX.com !
Cheryl
lkearny - May 14, 2005 - 1:56 pm
Thank you, Cheryl. I will do everything you said. You've not only been helpful, you're very clear. As a writer of instructional materials, I truly appreciate it.
- Lynn K
lkearny - May 14, 2005 - 2:18 pm
Ooops - Cheryl, I have started Norton AntiVirus and looked at the buttons indicating the sections. There is no ShowTools button, anywhere.
The available buttons are:
-Scan Repair
-Live Update
-Scheduler
-Preferences
-View History
-Virus Info
-Trash
There are also clickable options for
-Disk View/File View
-Show Invisible Files
Preferences say nothing about Quarantine, or tools.
Norton AntiVirus Help says nothing about it, either.
Nor is there a ShowTools option in any of the drop down menus.
Do you have another suggestion for how to proceed?
Thanks,
Lynn K
Cheryl - May 14, 2005 - 3:27 pm
Lynn,
What version of Norton Anti Virus do you have? Was this installed with the Internet Security or a separate CD install?
What version of Internet Security is it?
Do a Find (File menu>Find) and type in QuarantineFile.qtn
It could be just hiding. You can double check /Library/Application Support/Norton AntiVirus as that is where I found it.
--------
Let me know if you need further assistance and thank you for using MacOSX.com !
Cheryl
lkearny - May 14, 2005 - 4:44 pm
Cheryl,
I did the file search which turned up nothing. I also did a manual search in Library/Application Support/Norton and found no Quarantine file or folder - in fact, no reference to Quarantine at all. I am guessing that there isn't one in my package, and that I don't need to worry about deleting an infected file from there.
I also did a complete scan of my hard disk (just in case, because of the Hacktool message) and it turned up nothing.
All my Norton Aps, I discovered, came in a single package called Norton Solutions. They may be stripped-down versions.
They are:
Norton AntiVirus 8.0.4
Norton Internet Security 2.0
Norton Personal Firewall 2.0.2
Norton Privacy Control 1.0.1
All seem to date from 2002.
I will attempt to delete all of them, then reinstall the Norton AntiVirus part. Will it overwrite my existing virus definitions (which I keep up to date), or will I have to go on line and download all of them since 2002 again? Or do you know?
Thanks,
Lynn K
Cheryl - May 14, 2005 - 9:06 pm
Lynn,
Rather than manually deleting those files, Go to:
http://service1.symantec.com/SUPPORT...pen&dtype=corp
Download the Symantec Uninstaller version 1.01. You will need to unstuffit manually by clicking twice on the box icon. It will uninstall those hidden files. You just need to check Applications and Library/Application Support for any Symantec or Norton files.
Then when you install Anti Virus, you just need to install the only latest definitions for May 05.
--------
Let me know if you need further assistance and thank you for using MacOSX.com !
Cheryl