Tried everything but Norton Antivirus is still running in the background.

Avast Free Antivirus / Premium Security
1

This computer is running Windows XP and I did have Norton 360 installed. The subscription was running out so I decided to switch to Avast as I have been very happy with it running on my other (Vista) laptop.

I uninstalled from Add Remove Programs -
Got the message -
Avast detected the following program is running:
Norton Antivirus/Symantec Antivirus
The on-access scanner module of his program and the on-access scanner of avast! CANNOT be active a the same time
As a result, the avast! main on-access scanners - Standard Shield, P2P Shield and Instant Messaging Shield - were disabled

I ran the Norton Antivirus removal tool - same message
I went into the registry and followed directions as to which keys to remove - same message
Ran the norton removal tool in safe mode too - same message

I have tried all the advice that I can find on the net and I still get the message.

On the postive side - the virus database is updated - so the audio message tells me.

Is there somewhere I can go to see a list of all the possible places that Norton can still be running in the background?

Thanks in advance
Maria

2

Try doing this:
Uninstall Avast
Restart
Use Avast Removal Tool
Restart
Use Norton Removal Tool
Restart
Redownload Avast
Restart

3

I did not know there was an Avast! removal tool.

I actually have done all that except run the Avast removal tool.

I will go off and try that.

Thanks
Maria

4

Maybe a HijackThis log would help to see what is running:
http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html

5

follow the advice from Donovansrb10, but befor installing i would clean the computer with CCleaner. run cleaner and reg cleaner

http://www.filehippo.com/download_ccleaner/

6

OK -
Followed the instructions from Donovanrb10 - same message (I also again got the audio message 'Virus Database has been updated"
Downloaded and ran the Hijack this tool and I have copied the exerpts that I think may be significant: but I am not sure what to do with them?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:35:27 PM, on 16/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
C:\WINDOWS\system32\nvsvc32.exe
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM..\Run: [BootWarn] C:\Program Files\Norton SystemWorks\Norton AntiVirus\BootWarn.exe /a

O4 - HKCU..\RunOnce: C:\Program Files\Internet Explorer\iexplore.exe http://www.symantec.com/techsupp/servlet/ProductMessages?module=2009&error=0&language=en&product=SymNRT&version=2009.0.5.26&build=Symantec&a=00000082.00000022.0000004e&b=00000082.00000045.00000119&c=00000082.000000e7.0000027c

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

7

C:\WINDOWS\system32\nvsvc32.exe I think it’s necessary to run. more info here : http://www.bleepingcomputer.com/startups/nvsvc32.exe-11911.html

O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup. is about your Graphic Card, it’s not necessary to run at the startup. more info here : http://www.bleepingcomputer.com/startups/rundll32.exe_NvCpl.dll_NvStartup-3803.html

O4 - HKLM..\Run: [BootWarn] C:\Program Files\Norton SystemWorks\Norton AntiVirus\BootWarn.exe /a. this belongs to Norton you can check it so that you could remove it, since you uninstalled Norton.

O4 - HKCU..\RunOnce: C:\Program Files\Internet Explorer\iexplore.exe http://www.symantec.com/techsupp/servlet/ProductMessages?module=2009&error=0&language=en&product=SymNRT&version=2009.0.5.26&build=Symantec&a=00000082.00000022.0000004e&b=00000082.00000045.00000119&c=00000082.000000e7.0000027c. this internet explorer opened on your computer. don’t check it.

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe. Don’t check it, it’s for your graphic card.

go to this path : C:\program files. if you find any folder belongs to Norton delete it.

good luck

8

Its best to post the whole HijackThis log even if it takes 2 postings.

You have not completely removed Symantec (Norton) as exibited by the following line:
O4 - HKLM..\Run: [BootWarn] C:\Program Files\Norton SystemWorks\Norton AntiVirus\BootWarn.exe /a

MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
IE7 is more secure than IE6 and IE8 is even better: http://www.microsoft.com/windows/internet-explorer/features/stay-safer-online.aspx?tabid=2&catid=1

IE8 download.
http://www.microsoft.com/windows/internet-explorer/worldwide-sites.aspx

9
  1. Remove NAV or Norton 360 through Add/Remove programs from Control Panel. Boot.
  2. Use Norton Removal Tool for Windows 2000/XP/Vista or Norton Removal Tool for Windows 98/Me. Boot.
  3. Install avast! (or repair the installation) and boot.

The Norton Removal Tool uninstalls all Norton 2008/2007/2006/2005/2004/2003 products and Norton 360 from your computer.