"o/s is XP Home.."
with xp there appears to be a number of other reasons for auto-protect not running, besides the one i mentioned. i'll post a link.
"I will check but assuming they are disabled or not there at all, what do I do next.."
first look in xp's task manager when friend has nav running, to determine if those processes are running. if yes, then there's another prob. if no, then follow steps outlined in link below.
"As for firewall, he has Linksys router.. regular one, not wireless..
good firewall, as far as inbound traffic goes. but it does nothing for outbound. i run Linksys BEFSR41 plus Zonealarm Free. i never ran just the router by itself, always in conjunction with the software firewall. a router will not stop a trojan at the gate. the trojan walks right in. and a router will not stop the trojan from calling home. might be part of your friend's problem, might not. if it isn't now, it may well soon be.
"Incidentally, I have Norton Systemworks Pro and I just checked my task manager and don't see these names ? Are they different from version to version.."
yes, the two processes i alluded to are new to nav2003.
"Come to think of it, how do I check if all the processes that are running under my XP Pro are legitimate.. Thanks.."
that is an on-going education process, sultan. familiarizing yourself with what is there is one of the many layers of defense one should employ in computer security. the more you check into these running apps, the easier it will be for you to notice when an uninvited guest has taken up residence. and just to make it all a bit more interesting, frequently malware will create names for the nasty that closely resemble legitimate processes... one such example is the Backdoor.IRC.Zcrew trojan discovered just a couple months ago. one file it creates is Svchost32.exe. if you have this file on your system, you're in trouble. but svchost.exe, otoh, is a legit windows file. so the bar gets raised constantly.... and a router doesn't do a darn thing about Backdoor.IRC.Zcrew.
the very best place i can think to send you to start learning about these processes and services is black viper's site... blackviper.com
beyond that, it's ask, read and watch.
here's that link i promised you
Auto-Protect does not load after installing Norton AntiVirus and then restarting the computer
service1.symantec.com
and another
Should I disable ccApp.exe from loading at startup?
service1.symantec.com |
