Every since my IP address had disappeared (which is back now) I have had new components found by my ZoneAlarm Pro firewall. I had it set to auto configure, but I think it had ignored, if I remember right. I had it set to manual since then but just changed it back. I have seen my Norton's 2004 antivirus not appear in my toolbar on startup, But on restarting the pc it reappeared. Then ZoneAlarm Pro firewall did not appear in the toolbar on startup, Then after restarting the pc it would reappear. Norton's Antivirus reenable itself after I had disabled it, I believe it did this a couple of times.

Now tonight Norton Antivirus won't load corectly. I even shut down my computer completely and restarted it and still no Norton. I open the main Norton program and it shows that atuo protect is off and my email scanning says error. I went into Norton's and rechecked the auto protection and the email scanning, but when I close that section it goes right back to the error and no protection. I tried this twice an still no good.

ZoneAlarm warning said:
Advanced Program New
Common Client User Session to access or launch other Programs
Updated Norton AV
Application: ccApp.exe
Target: Symantec Integrator
Action: CreateProcess

Then ZoneAlarm's log says.
Common Client Settings Manager Service not allowed to call OpenProcess on Common Client User Session
Medium alser
Type: Advance Protection
Program: ccSetMgr.exe
Direction: Out going
Action taken: Blocked 20 times now

Also I have ZoneAlarm set to just log and notify me of high rated alers, but I have an alert every second for msmsgs.exe which says that it is a medium alert. I had went into control panel/administrator tools/ and set messenger to manual. Maybe this is wrong? In msconfig under services I have messenger checked and it lists it as stopped. But I had not had any problems with this before ZoneAlarm changed my IP address on me.

Also, here is an extra question, is it correct for the Symantec items is msconfig under Services to be listed as unknown manufacture? It also says the Symantec Network Drivers Service is not running. Is this normal? Sorry, I'm just overly concerned since I am having problems and don't know enough yet.

Someone have an idea what is going on? How can I fix this?

I'm not ignorant, I just need more learning!

Did you by any chance installed Win Xp Service Pack 2 lately??

It's nice to be important but it's more important to be nice...

No SP2 is still setting in the toolbar in my reminder to download.

If I recalled, when I first started getting these new component warnings from ZoneAlarm, I think I might have denied one or two of them in panic after it had already changed my IP address on me and ZoneAlarm had always taken care of things and had never asked me about this kind of thing before.

I know that Norton's scheduled scan still works because it just started.

I ran a Panda scan last night and it says my system is clean.

About a day after I had trouble with my ZoneAlarm I had done a Norton's live update and when it was done it told me that I had to restart my computer. So it is possible that some of the components might not be running if I actually did tell ZoneAlarm not to load a componet or two, like the ccSetMgr.exe

Later yesterday I also had a notice from ZoneAlarm about the components dplayx.dll and dpnet.dll. I sure don't know anything about these but after the trouble I have had, and it said Microsoft in the properties, I said yes to these components.

Ok, another thing, last night when I clicked in my ZoneAlarm on the more info button, it had trouble loadinig the page. I tried this a couple of different times. It was so slow that I would cancel it. I know it could have also been caused from my DSL too, but I wasn't having trouble with th main page that I had open when I first open Internet Explore

If my ZoneAlarm is corrupt, should I uninstall and reinstall my ZoneAlarm?

If I do reinstall my ZoneAlarm, do I delete the one I have now before the download or after?

Or would a system restore do the trick?

Or any other ideas?

I'm not ignorant, I just need more learning!

It sounds like you may have an application that is required by Norton that is being denied in Zone Alarm. Open the applications in Zone Alarm and make sure common client is set to be allowed access. Generic host process must also be allowed access. Check that anything connected with Symantec is allowed access. Msn messenger comes installed by default, and is listed as a startup program in msconfig. I do not use it and have removed it by using the procedure at "theeldergeek website".

Ok Norton AV has returned and looks like normal again.

Before I had to run uptown I had checked the Common Client Settings Manager Service for Access in the Trusted and Internet. I have not gave it Server rights though. Should I give it Server rights or Send Mail access?

This is strange cause I had not touched this programs in ZoneAlarm and it had already automatically been configured when I first bought this pc.

It seems to be ZoneAlarm's fault all along as I didn't have any of these problems till it lost my IP address. Unless something else is trying to change things. Maybe I should do a trojan scan.

Which trojan scan site should I use? I would like to get the best.

Where can I go to have a person look at my hjt log. Sorry I don't trust myself with those 2 online analizers. I would like to get some stuff on here cleanned up.

I'm not ignorant, I just need more learning!

"Where can I go to have a person look at my hjt log?"
Tammy, at least 3 people I offered this link
never went there.
That was three strikes, but I will offer it
to you.
Getting Help w/ Spyware:

Hey, that's a cool site. I'm going to certainly register.

Maybe these people who didn't go there are newbee's and didn't understand the importance of this free service this site has to offer or were scared off because it is a senitive program and can really mess up your computer if you don't follow the directions.

I'm a little scared of the htj program and I should be. Thats why I will go there cause I need personal help as I don't trust my own judgement to use those online analizers.

But it will have to wait till after dinner. I have to feed the rug rats first.

Thanks

I'm not ignorant, I just need more learning!

It will take a couple of days to get to you,
but I will take a look also.

I need to ask this question, do the "rug rats"
have access to your computer?
They seem to go where the problem sites are.

IE-SPYAD puts over 5000 sites in your restricted zone, so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.

IE-SPYAD: Restricted Sites List for Internet Explorer
IE-Spyad Tutorial

Well I'm back but Norton AV is gone again. This is so frustrating. I'm heading over to post my hjk now.

No one can get onto my pc without me putting a password in first. My teenage grandchild, is the one I have to watch what sites are gone to, but I know for sure that no one has used this computer except for me since the 15th of this month. I didn't have a bit of trouble with Norton's or anything else, like ZoneAlarm asking for component access permission, till ZoneAlarm lost my IP address. That's when thing started to go wacky.

Also Earlier today, before I shut down the pc to fix dinner I had went to Windows Update to check on any new updates. I had disabled the the Norton AV for this. But when I clicked on the link there to to manually choose the updates I wanted and it loaded that next page, Norton AV had enabled itself again. I didn't disable Nortons the second time, I just left it enabled.

Then ZoneAlarm also had new things that I had to let run to download the update, which I was trying to update Direct X 9. But I guess I didn't need it cause it said that it didn't install. But ZoneAlarm was asking for a few things to access the internet again.

Thanks again

I'm not ignorant, I just need more learning!

I was trying to update Ad-aware to give my pc one last scan before going to do the hjt and when I clicked on updates it said that there was an update available, but it is the same one I downloaded on March 23 and ran. I guess now that is messed up too?

I'm not ignorant, I just need more learning!

In addition to using HJT, I would turn the XP firewall on in the control panel under advanced network setiings. I would then uninstall Zone Alarm and see what happens. Is there a reason XPsp2 is not installed? For maximum safety I would get a Dlink router(DI604) or a Linksys. I would then install sp2. You can then use sp2's firewall to track outgoing traffic if you want. More importantly there will be no software conflicts. I installed Zone Alarm pro on my two daughters computers. One daughter has Comcast as her ISP, and I had to uninstall it a week later due to conflicts. The other system works great. Different setups can have very different results.

Thanks Capt,
I will do what you said about turning on XP Firewall and uninstalling ZoneAlarm.

I am little slow today and this is the first chance I have had today to get on my computer. I spent last night reading at the Spyware Warrior site where I will do my hjt post, and trying to refresh myself on how to back up my regedit and reading about some of the other information they had posted there.

I haven't downloaded SP2 cause I am really scared about it possibly messing up my new pc and I really can't afford to have someone work on it. Maybe I shouldn't be scared of it. Maybe I just need to be more gutzy and live more dangerously.

I will check on the Dlink router(DI604) or a Linksys possibly tomorrow.

I will probably need a link to a site that will show me how to set it up if anyone has one. I know very little info on these routers as how to use them.

Ok, now I am going to go to do my hjt post tonight and turn on the XP Firewall.

Thanks Capt

I'm not ignorant, I just need more learning!

Tammy, I have had trouble in the past with Zonealarm - some viruses can take control of it and do wacky stuff. I was personally hit with one that changed the password in ZA and my router as well.
Your best bet would be to save anything you need and format the drive, making sure to get the service pack before you do it.
I have gotten to where I install the OS, service packs, Norton, and then I install sygate personal firewall before I even plug the box up to the network.
At that point I will finish updating the OS, then Norton.
Often, a computer can get a virus before it has even completed the OS updates.
Hope everything works out OK.

Note: installing a service pack on a system that has not just been formatted and OS reinstalled is a bad idea.
I do this kind of thing for a living. A new service pack means I make $$.