NAV LiveUpdate 3.0

NAV LiveUpdate 3.0
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
NAV LiveUpdate 3.0 Richard Mueller 06-28-2006
Posted by Richard Mueller on June 28, 2006, 9:57 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
When I used NAV LiveUpdate a week ago there was an update in addition to the
usual virus signature file. For several hours after that I kept getting
messages from my firewall (ZoneAlarm) that a program was attempting to
access the Internet. I kept saying no. I recognized the program as NAV
related but I don't remember the name now. I finally instructed ZoneAlarm to
"remember" to never grant this program access to the Internet.

Now this week when I run LiveUpdate to get the latest signature file the
interface is new and I get an error - LU1814, LiveUpdate could not retrieve
the update list. ZoneAlarm now has two entries for LuComServer. One is
version 2.6.14.0 (8/18/05) with settings so I am always asked if it tries to
access the Internet. I've had this setting for years. The other is for
version 3.0.0.166 dated 5/15/06 with permission denied.

Clearly, the new version is attempting to call home. Does anyone know what
the new version is doing? I can't find anything about it on the Symantec web
site.

--
Richard
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net



Posted by David H. Lipman on June 28, 2006, 10:17 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| When I used NAV LiveUpdate a week ago there was an update in addition to the
| usual virus signature file. For several hours after that I kept getting
| messages from my firewall (ZoneAlarm) that a program was attempting to
| access the Internet. I kept saying no. I recognized the program as NAV
| related but I don't remember the name now. I finally instructed ZoneAlarm to
| "remember" to never grant this program access to the Internet.
|
| Now this week when I run LiveUpdate to get the latest signature file the
| interface is new and I get an error - LU1814, LiveUpdate could not retrieve
| the update list. ZoneAlarm now has two entries for LuComServer. One is
| version 2.6.14.0 (8/18/05) with settings so I am always asked if it tries to
| access the Internet. I've had this setting for years. The other is for
| version 3.0.0.166 dated 5/15/06 with permission denied.
|
| Clearly, the new version is attempting to call home. Does anyone know what
| the new version is doing? I can't find anything about it on the Symantec web
| site.
|

Do you actually have LU v3.0 installed or is this an update ?

Maybe you might want to try uninstalling and then re-installing LU v3.0 manually.

ftp://ftp.symantec.com/public/english_us_canada/liveupdate/3.0/

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by Richard Mueller on June 28, 2006, 11:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>
> | When I used NAV LiveUpdate a week ago there was an update in addition to
> the
> | usual virus signature file. For several hours after that I kept getting
> | messages from my firewall (ZoneAlarm) that a program was attempting to
> | access the Internet. I kept saying no. I recognized the program as NAV
> | related but I don't remember the name now. I finally instructed
> ZoneAlarm to
> | "remember" to never grant this program access to the Internet.
> |
> | Now this week when I run LiveUpdate to get the latest signature file the
> | interface is new and I get an error - LU1814, LiveUpdate could not
> retrieve
> | the update list. ZoneAlarm now has two entries for LuComServer. One is
> | version 2.6.14.0 (8/18/05) with settings so I am always asked if it
> tries to
> | access the Internet. I've had this setting for years. The other is for
> | version 3.0.0.166 dated 5/15/06 with permission denied.
> |
> | Clearly, the new version is attempting to call home. Does anyone know
> what
> | the new version is doing? I can't find anything about it on the Symantec
> web
> | site.
> |
>
> Do you actually have LU v3.0 installed or is this an update ?
>
> Maybe you might want to try uninstalling and then re-installing LU v3.0
> manually.
>
> ftp://ftp.symantec.com/public/english_us_canada/liveupdate/3.0/
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
I never installed 3.0. I believe the last LiveUpdate gave me
LuComServer_3_0.exe. The file is dated 5/15/06 and is version 3.0.0.166.

I just configured LuComServer_3_0.exe in ZoneAlarm to ask before accessing
the Internet (like I had version 2.6 configured). Now LiveUpdate runs (after
I give permission), but now I get another error, LU1875 - "This update
failed during its preprocessing welcome text phase". It downloaded a bunch
of files and seems to have determined most of my products are up to date,
except one NAV virus definition, which was aborted due to LU1875.

I will look into your link, but I want to see if LuComServer attempts to
access the Internet again. My guess is it won't work until I let it call
home.

--
Richard
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net



Posted by Phil Weldon on June 28, 2006, 11:25 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
'Richard Mueller' wrote:
| I never installed 3.0. I believe the last LiveUpdate gave me
| LuComServer_3_0.exe. The file is dated 5/15/06 and is version 3.0.0.166.
|
| I just configured LuComServer_3_0.exe in ZoneAlarm to ask before accessing
| the Internet (like I had version 2.6 configured). Now LiveUpdate runs
(after
| I give permission), but now I get another error, LU1875 - "This update
| failed during its preprocessing welcome text phase". It downloaded a bunch
| of files and seems to have determined most of my products are up to date,
| except one NAV virus definition, which was aborted due to LU1875.
|
| I will look into your link, but I want to see if LuComServer attempts to
| access the Internet again. My guess is it won't work until I let it call
_____

Let LiveUpdate run completely. Do not block any outbound communications
from Norton Antivirus and LiveUpdate. THEN turn 'Automatic Update' OFF.

'Live Update' has the very bad characteristic of checking for updates every
four hours BUT DOES NOT CHECK IF THE UPDATES ON THE SERVER AT SYMANTEC ARE
NEWER THAN THOSE INSTALLED ON YOUR SYSTEM.

The only way around this is to turn 'Automatic Update' off, and manually
invoke 'Live Update' every weekend, or more often if you wish. That is the
ONLY way at present to keep 'Live Update' from checking in and downloading
the same virus definitions and 'Trusted applications list' every fours hours
that the system is running. Not a good solution, but there you are.

You absolutely should NOT block your anti-malware applications from
accessing the web, but rather you SHOULD choose manual rather than automatic
updates in the case of Norton Antivirus.

Phil Weldon



|
| >
| > | When I used NAV LiveUpdate a week ago there was an update in addition
to
| > the
| > | usual virus signature file. For several hours after that I kept
getting
| > | messages from my firewall (ZoneAlarm) that a program was attempting to
| > | access the Internet. I kept saying no. I recognized the program as NAV
| > | related but I don't remember the name now. I finally instructed
| > ZoneAlarm to
| > | "remember" to never grant this program access to the Internet.
| > |
| > | Now this week when I run LiveUpdate to get the latest signature file
the
| > | interface is new and I get an error - LU1814, LiveUpdate could not
| > retrieve
| > | the update list. ZoneAlarm now has two entries for LuComServer. One is
| > | version 2.6.14.0 (8/18/05) with settings so I am always asked if it
| > tries to
| > | access the Internet. I've had this setting for years. The other is for
| > | version 3.0.0.166 dated 5/15/06 with permission denied.
| > |
| > | Clearly, the new version is attempting to call home. Does anyone know
| > what
| > | the new version is doing? I can't find anything about it on the
Symantec
| > web
| > | site.
| > |
| >
| > Do you actually have LU v3.0 installed or is this an update ?
| >
| > Maybe you might want to try uninstalling and then re-installing LU v3.0
| > manually.
| >
| > ftp://ftp.symantec.com/public/english_us_canada/liveupdate/3.0/
| >
| > --
| > Dave
| > http://www.claymania.com/removal-trojan-adware.html
| > http://www.ik-cs.com/got-a-virus.htm
| >
| >
| I never installed 3.0. I believe the last LiveUpdate gave me
| LuComServer_3_0.exe. The file is dated 5/15/06 and is version 3.0.0.166.
|
| I just configured LuComServer_3_0.exe in ZoneAlarm to ask before accessing
| the Internet (like I had version 2.6 configured). Now LiveUpdate runs
(after
| I give permission), but now I get another error, LU1875 - "This update
| failed during its preprocessing welcome text phase". It downloaded a bunch
| of files and seems to have determined most of my products are up to date,
| except one NAV virus definition, which was aborted due to LU1875.
|
| I will look into your link, but I want to see if LuComServer attempts to
| access the Internet again. My guess is it won't work until I let it call
| home.
|
| --
| Richard
| Microsoft MVP Scripting and ADSI
| Hilltop Lab - http://www.rlmueller.net
|
|



Posted by Richard Mueller on June 29, 2006, 12:26 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> 'Richard Mueller' wrote:
> | I never installed 3.0. I believe the last LiveUpdate gave me
> | LuComServer_3_0.exe. The file is dated 5/15/06 and is version 3.0.0.166.
> |
> | I just configured LuComServer_3_0.exe in ZoneAlarm to ask before
> accessing
> | the Internet (like I had version 2.6 configured). Now LiveUpdate runs
> (after
> | I give permission), but now I get another error, LU1875 - "This update
> | failed during its preprocessing welcome text phase". It downloaded a
> bunch
> | of files and seems to have determined most of my products are up to
> date,
> | except one NAV virus definition, which was aborted due to LU1875.
> |
> | I will look into your link, but I want to see if LuComServer attempts to
> | access the Internet again. My guess is it won't work until I let it call
> _____
>
> Let LiveUpdate run completely. Do not block any outbound communications
> from Norton Antivirus and LiveUpdate. THEN turn 'Automatic Update' OFF.
>
> 'Live Update' has the very bad characteristic of checking for updates
> every
> four hours BUT DOES NOT CHECK IF THE UPDATES ON THE SERVER AT SYMANTEC ARE
> NEWER THAN THOSE INSTALLED ON YOUR SYSTEM.
>
> The only way around this is to turn 'Automatic Update' off, and manually
> invoke 'Live Update' every weekend, or more often if you wish. That is
> the
> ONLY way at present to keep 'Live Update' from checking in and downloading
> the same virus definitions and 'Trusted applications list' every fours
> hours
> that the system is running. Not a good solution, but there you are.
>
> You absolutely should NOT block your anti-malware applications from
> accessing the web, but rather you SHOULD choose manual rather than
> automatic
> updates in the case of Norton Antivirus.
>
> Phil Weldon

Thanks for the response. If understand correctly, I believe I have been
doing what you suggest for a long time. I never use automatic updates, but
always manually run LiveUpdate once per week (late Wed. or Thur.). I always
configure LuComServer in ZoneAlarm to ask permission, so I have one extra
click, but I know NAV is never doing anything I have not requested. When I
request the manual update, I always grant permission. However, the behaviour
changed in the last week. Now it attempts to access the Internet when I have
not initiated anything. Plus, when I run LiveUpdate and grant permission to
access the Internet it fails. If the solution is to allow LuComServer to
access the Internet whenever it likes, I will stop using NAV. I'm surprised
no one else seems to have noticed a difference in the last week. It seems
I'm the only one that configured LuComServer to always as for permission.

I know, I'm picky, I like to think I'm in charge of my computer, and I
should trust Symantec. Sorry about that. However, I would like to know what
changed.

Richard Mueller



Similar ThreadsPosted
Re: No liveupdate October 9, 2008, 3:00 pm
Symantec Liveupdate September 26, 2007, 4:44 pm

The site map in XML format XML site map

Contact Us | Privacy Policy