1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Runtime error with Norton Firewall

Discussion in 'Security and Privacy' started by harp, 2003/11/03.

Thread Status:
Not open for further replies.
  1. 2003/11/03
    harp

    harp Inactive Thread Starter

    Joined:
    2003/11/02
    Messages:
    11
    Likes Received:
    0
    Hi has any1 ever seen this before?

    On a fresh bootup when I go into norton firewall to start it I get the following error message:

    Runtime error!

    Program C:\program files\common files\symantec shared\nmain.exe

    Abnormal program termination


    I recently had the svcpack.exe problem ( now cured..... I hope) and have also upgraded to IE 6.

    Any ideas.......... thx in advance
     
    harp,
    #1
  2. 2003/11/03
    harp

    harp Inactive Thread Starter

    Joined:
    2003/11/02
    Messages:
    11
    Likes Received:
    0
    Forgot this

    Logfile of HijackThis v1.97.3
    Scan saved at 14:47:09, on 02/11/03
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
    C:\PROGRAM FILES\NORTON PERSONAL FIREWALL\NISUM.EXE
    C:\PROGRAM FILES\NORTON PERSONAL FIREWALL\CCPXYSVC.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\PROGRAM FILES\CREATIVE\LAUNCHER\CTLAUNCHER.EXE
    C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\WINDOWS\SYSTEM\MSWHEEL.EXE
    C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http:///
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http:///
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http:///
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [Welcome] C:\WINDOWS\Welcome.exe /R
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [Creative Launcher] C:\Program Files\Creative\Launcher\CTLauncher.EXE
    O4 - HKLM\..\Run: [3dfx Tools] rundll32.exe 3dfxCmn.dll,UpdateRegSettings
    O4 - HKLM\..\Run: [TIPS] C:\PROGRA~1\MICROS~1\tips\mouse\tips.exe
    O4 - HKLM\..\Run: [POINTER] C:\PROGRA~1\MICROS~1\point32.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe "
    O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe "
    O4 - HKLM\..\Run: [MicroDialler] C:\Freeserve\FreeserveConnectionKit\atdialler3.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
    O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe "
    O4 - HKLM\..\RunServices: [Nisum] C:\Program Files\Norton Personal Firewall\NISUM.EXE
    O4 - HKLM\..\RunServices: [ccPxySvc] C:\PROGRA~1\NORTON~3\CCPXYSVC.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE10\EXCEL.EXE/3000
    O9 - Extra button: ICQ (HKLM)
    O9 - Extra 'Tools' menuitem: ICQ (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potc_x.cab
    O16 - DPF: Yahoo! Backgammon - http://download.games.yahoo.com/games/clients/y/at0_x.cab
    O16 - DPF: {FAE74270-E5EE-49C3-B816-EA8B4D55F38F} (H2hPool Control) - http://mirror.worldwinner.com//games/v45/h2hpool/h2hpool.cab
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst.cab
    O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
    O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/bcd48c18cb7498/housecall.antivirus.com/housecall/xscan53.cab
     
    harp,
    #2

  3. to hide this advert.

  4. 2003/11/03
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Do a Google search for nmain.exe - stacks of hits, several emanating from Symantec.

    HTH
     
  5. 2003/11/03
    harp

    harp Inactive Thread Starter

    Joined:
    2003/11/02
    Messages:
    11
    Likes Received:
    0
    No Luck

    Thx for the reply Pete . I did try this today but no luck on finding a cure :(
     
    harp,
    #4
  6. 2003/11/03
    harp

    harp Inactive Thread Starter

    Joined:
    2003/11/02
    Messages:
    11
    Likes Received:
    0
    possible solution ........... well error message has gone

    I opened the symantec shared folder and copied the nmain.exe then pasted it into the norton firewall folder. Clicked on the shortcut and started norton firewall WITHOUT the error message?

    Now to the best of my knowledge the nmain.exe was NEVER in the NF folder before. I know its not in the Norton anti virus folder and it works fine (never had an error message on starting it).



    Any1 with any ideas chirp up.
     
    harp,
    #5
  7. 2003/11/03
    Johanna

    Johanna Inactive Alumni

    Joined:
    2003/03/08
    Messages:
    2,402
    Likes Received:
    2
    Turn off the modem, uninstall Norton, reboot, reinstall Norton, reboot, turn on the modem and run Live Update until it exhausts itself, then reboot and run Live Update again.

    Norton Rule #3
    Do not try to fix anything from within Norton. Just do a clean reinstall. Don't take a chance with your firewall.

    Johanna
     
  8. 2003/11/04
    harp

    harp Inactive Thread Starter

    Joined:
    2003/11/02
    Messages:
    11
    Likes Received:
    0
    Error message now gone!

    Thanks Johanna

    Yeah you hit the nail square on the head . Next time I booted up and guess what the error message was back again. So uninstalled the firewall and reinstalled it then ran the updates and NO more error message.

    The funny thing was when I reinstalled the firewall program my Task Schedular icon (I'm using Win 98se) came back again this had disappeared after I had upgraded to IE 6 ( mind you that was around the same time as the SVCPACK.exe problem).

    I also ran the online firewall checker at shields up https://grc.com/x/ne.dll?bh0bkyd2 last night and it passed ALL tests with flying colours, so it must have been working but just had some sort of conflict somewhere.

    Anyway its now sorted and ALWAYS better to be safe than sorry!

    Thanks again.
     
    harp,
    #7
  9. 2003/11/04
    Johanna

    Johanna Inactive Alumni

    Joined:
    2003/03/08
    Messages:
    2,402
    Likes Received:
    2
    Glad you got it fixed. Thanks for posting back.

    BTW, you have a lot of stuff running at once. You might see some better performance if you shut some of that down and only turn it on when you want it A great start up program is here.

    Johanna
     
  10. 2003/11/04
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hi harp,

    Just as an aside, you can get rid of the "search" entries. Usually those indicate hijacked browser seaches, but here its just clutter.

    Everytime I do a search, IE creates one of those entries and I get rid of them every once in a while.

    Regards - Charles
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.