Norton Anti-virus sometimes just turns off auto protect

[Hensley300]

Ive noticed a problem with my norton anti-virus. Sometimes ive noticed auto protect and email scan will turn off. Anyone else had this problem. I restart my cpu and run a virus scan with my system restore turned off and NO virus. Ive run up to date spybot and adware and no spyware. What could be the problem? perhaps an undetected virus or trojan?

[ghost2003]

what version is it? 2k2, 2k3 or 2k4?

[Hensley300]

2003 version, up to date definitions, run once a week

[EzyStvy]

perhaps an undetected virus or trojan -> Do a fresh reboot. When it comes back up, click on the network icons in the systray. See if you have a bunch of activity without doing anything..

[Hensley300]

went to mcaffee's home site last night and did one of their free scans and wouldnt ya know, i do have a virus on my cpu. Not a major one they say, i forget what is was called, like a regseeker or something but one is there and gave me the location So, i guess its good bye norton and hello mcaffee.
I believe there is another thread on that subject though

[glc]

McAfee is a step backwards, it has other issues. Not all antivirus programs catch everything. McAfee is going to miss things that Norton catches. Don't condemn a program for one incident like this. This is why you crosscheck whatever you use periodically with one or more of the free online scans - especially if you notice strange behavior.

[Hensley300]

TY for the reply GLC. One question then, if norton doesnt recognize it, mcaffee does and i cant get to the registry file that has the virus, whats my next step? should i call norton and tell them and get a suggestion for them? Its location was if i remember in c drive, hp area (my cpu is hp built). But, i dont have a hp folder in my c drive unless its a subfolder

[ghost2003]

try housecall, scan and clean/delete the virus. I never tried McAfee's scan but im guessing what ever one you tried is detection only.
http://housecall.trendmicro.com

[glc]

Scan again, this time write down the exact name - and look it up in McAfee's online virus encyclopedia - there will very likely be manual removal instructions for it. I know Symantec has instructions for most of the viruses in its database. Kinda hard to tell you how to get rid of something we don't know the exact name of.

[Hensley300]

Thx for the suggestion, housecall did not pick up the virus. I went back to mcafee and did a scan and this is the information:
virus is actually a trojan/win32 called a reg/seeker. its in my registry in region: C:\hp\region\EN_US-ie.reg

no removal instructions given but does say DAT required to remove is 4194

so, any removal tips now?

[glc]

I'd start by deleting that file. It hasn't been activated yet (or other antivirus packages would detect something) - but if you double click on that .reg file, that's what sets it into action.

Might want to post a HijackThis log in the Security forum to make sure everything is okay - please read the sticky thread first.

[Hensley300]

Thanx for all the help guys. Problem has been fixed. I deleted that particular registry file and rescanned using both mcaffee and norton and all is well in computer land. I believe it was acquired when i updated my weatherbug who is now heavily implanting third party software onto cpu's when you upgrade because its too expensive to keep it for free with no spyware. Thx again