Symantec Tamper Protection Alert Problem

Hello everyone

I have been getting many "Symantec Tamper Protection Alert Problem" pop-up messages on my laptop.

I have run the hijackthis and this is what I get. Any help?

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 9:30:09 μμ, on 27/8/2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:






C:Program FilesMicrosoft Security EssentialsMsMpEng.exe


C:Program FilesSymantecSymantec Endpoint ProtectionSmc.exe

C:Program FilesCommon FilesSymantec SharedccSvcHst.exe









C:Program FilesSynapticsSynTPSynTPEnh.exe

C:Program FilesFujitsuMobile Software SuiteCommonUiMdmTipUiMdmTip.exe


C:Program FilesCommon FilesSymantec SharedccApp.exe

C:Program FilesMicrosoft Security Essentialsmsseces.exe

C:Program FilesJoin AirUIExec.exe


C:Program FilesCisco SystemsVPN Clientcvpnd.exe


C:Program FilesCommon FilesFujitsuManageabilityHaMDevMg.exe1.01HaMDevMg.exe

C:Program FilesJavajre6binjqs.exe

C:Program FilesNeroNero8Nero BackItUpNBService.exe



C:Program FilesSymantecSymantec Endpoint ProtectionRtvscan.exe


C:Program FilesJoin AirAssistantServices.exe

D:Program FilesmyiHomeappmyiHome-server.exe

C:Program FilesSymantecSymantec Endpoint ProtectionSmcGui.exe

C:Program FilesCommon FilesFujitsuManageabilityCnMdKHkH.exe1.01CnMdKHkH.exe

C:Documents and SettingsAdministratorjoateo.exe



C:Program FilesMozilla Firefoxfirefox.exe

C:Program FilesMozilla Firefoxplugin-container.exe

C:Documents and SettingsAdministratorDesktopHiJackThis.exe

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL =

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL =

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page =

R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page =

R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = marisanew:8080

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:ms-appsofficeOffice12GrooveShellExtensions.dll

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6binjp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll

O4 - HKLM..Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe

O4 - HKLM..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe

O4 - HKLM..Run: [Persistence] C:WINDOWSsystem32igfxpers.exe


O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe

O4 - HKLM..Run: [COMImpersonator] C:Program FilesFujitsuMobile Software SuiteCommonUiMdmTipUiMdmTip.exe

O4 - HKLM..Run: [GrooveMonitor] "C:ms-appsofficeOffice12GrooveMonitor.exe"

O4 - HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe"

O4 - HKLM..Run: [MSSE] "C:Program FilesMicrosoft Security Essentialsmsseces.exe" -hide -runkey

O4 - HKLM..Run: [UIExec] "C:Program FilesJoin AirUIExec.exe"

O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe

O4 - HKCU..Run: [vaoada] C:Documents and SettingsAdministratorvaoada.exe /i

O4 - HKCU..Run: [joaveo] C:Documents and SettingsAdministratorjoaveo.exe /U

O4 - HKCU..Run: [nlyit] C:Documents and SettingsAdministratornlyit.exe /w

O4 - HKCU..Run: [vkyeuh] C:Documents and SettingsAdministratorvkyeuh.exe /c

O4 - HKCU..Run: [laofe] C:Documents and SettingsAdministratorlaofe.exe /T

O4 - HKCU..Run: [joateo] C:Documents and SettingsAdministratorjoateo.exe /Z

O4 - HKCU..Run: [bumuk] C:Documents and SettingsAdministratorbumuk.exe /V

O4 - HKCU..Run: [yaobuf] C:Documents and SettingsAdministratoryaobuf.exe /d


O4 - HKUSS-1-5-19..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')


O4 - HKUSS-1-5-20..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')

O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')

O4 - HKUSS-1-5-18..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')

O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')

O4 - HKUS.DEFAULT..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')

O4 - Global Startup: Cisco Systems VPN Client.lnk = C:Program FilesCisco SystemsVPN Clientvpngui.exe

O4 - Global Startup: myiHome Server.lnk = D:Program FilesmyiHomeappmyiHome-server.exe

O8 - Extra context menu item: E&ξαγωγή στο Microsoft Excel - res://C:ms-appsofficeOffice12EXCEL.EXE/3000

O9 - Extra button: Αποστολή στο OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:ms-appsofficeOffice12ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Α&ποστολή στο OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:ms-appsofficeOffice12ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:ms-appsofficeOffice12REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} -

O17 - HKLMSystemCCSServicesTcpipParameters: Domain =

O17 - HKLMSoftware..Telephony: DomainName =

O17 - HKLMSystemCS1ServicesTcpipParameters: Domain =

O17 - HKLMSystemCS2ServicesTcpipParameters: Domain =

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:ms-appsofficeOffice12GrooveSystemServices.dll

O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:WINDOWSsystem32browseui.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:WINDOWSsystem32browseui.dll

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:WINDOWSsystem32agrsmsvc.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:Program FilesCommon FilesSymantec SharedccSvcHst.exe

O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:Program FilesCisco SystemsVPN Clientcvpnd.exe

O23 - Service: Fujitsu HaMDevMg.1.01 (HaMDevMg.1.01) - Fujitsu Technology Solutions - C:Program FilesCommon FilesFujitsuManageabilityHaMDevMg.exe1.01HaMDevMg.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:Program FilesJavajre6binjqs.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:PROGRA~1SymantecLIVEUP~1LUCOMS~1.EXE

O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:Program FilesNeroNero8Nero BackItUpNBService.exe

O23 - Service: NMIndexingService - Nero AG - C:Program FilesCommon FilesNeroLibNMIndexingService.exe

O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:WINDOWSsystem32IoctlSvc.exe

O23 - Service: Symantec Management Client (SmcService) - Symantec Corporation - C:Program FilesSymantecSymantec Endpoint ProtectionSmc.exe

O23 - Service: Symantec Network Access Control (SNAC) - Symantec Corporation - C:Program FilesSymantecSymantec Endpoint ProtectionSNAC.EXE

O23 - Service: Symantec Endpoint Protection (Symantec AntiVirus) - Symantec Corporation - C:Program FilesSymantecSymantec Endpoint ProtectionRtvscan.exe

O23 - Service: UI Assistant Service - Unknown owner - C:Program FilesJoin AirAssistantServices.exe


End of file - 9680 bytes

View complete forum thread

Related threads

Symantec Tamper Protection Alert Problem

... forum and wanted to get some help. In the last month I keep getting "Symantec Tamper Protection Alert" messages ... O23 - Service: LiveUpdate - Symantec Corporation - C:PROGRA~1SymantecLIVEUP~ ... .exe O23 - Service: Symantec Auto-upgrade Agent ... missing) O23 - Service: Symantec Management Client (SmcService ...

Symantec Tamper Protection Alert Problem

In the last month I have begun to get "Symantec Tamper Protection Alert" messages frequently throughout the day, and it pops up when I am in different programs. Can anyone tell me how to discover the problem?

Symantec Tamper Protection Alert Issue

... newbie here. I keep getting a Symantec Tamper Protection Alert message on my desktop. ... .exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) ... O23 - Service: SAVRoam (SavRoam) - symantec - C:Program FilesSymantec AntiVirusSavRoam. ... O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown ...

Symantec AV tamper protection alert in app log

... server App log... is this related to IE7? All virus/spyware scans come up clean and ... : DOMAINadministrator Computer: MAINSERVER Description: SYMANTEC TAMPER PROTECTION ALERT Target: ... logs the error occurs almost immediately after launching the Symantec System Center Console from the server in ...

Symantec Tamper Protection Prompt

... Protection Alert each time I reboot my computer. When I try to click on the Symantec icon in the taskbar, it states that the file is infected. After a while, an alert appears on my screen and it begins to flash non ... make out some of the info. Prompt: Symantec Tamper Protection Alert Target: ...

Minowal Virus Removal

... :// ... bar.   I have run several anti-virus scans (I have Eset NOD 32, never had any serious virus / malware problems with it) and Malware Bytes ... .exe O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown ...

Symantec Tamper Protection Alert

... SharedccEvtMgr.exe O23 - Service: Symantec Settings Manager (ccSetMgr) ... .exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) ... exe O23 - Service: LiveUpdate - Symantec Corporation - C:PROGRA~1SymantecLIVEUP ... - Service: SAVRoam (SavRoam) - symantec - C:Program FilesSymantec AntiVirusSavRoam ...

Voice Ups and Popups

... I have Symantec installed on my pc and I've been receiving "Symantec Tamper Protection Alert" messages as well. I've run a full scan and removed the items ... After reading some articles on this site that seem very similar to the problems I'm having I installed HijackThis and ran the ...

symantec error

... . here is the properties from the error SYMANTEC TAMPER PROTECTION ALERT * Target:* ... .exe O23 - Service: Symantec Settings Manager (ccSetMgr) ... O23 - Service: LiveUpdate - Symantec Corporation - C:PROGRA~1SymantecLIVEUP ... - Service: SAVRoam (SavRoam) - symantec - C:Program FilesSymantec AntiVirusSavRoam ...

malware removal needed?

... the results which i dnt understand it, thought someone on the other thread said that my computer was infected to come to this thread and post my results from the scan. I may need a virus and malware removal. I downloaded avg already which messed my computer up. So I ...

Help get rid of Adware.Purityscan

Hi, My Symantec Antivirus keeps popping up Auto-Protect alerts for Adware.Purityscan ?hkdsk.exe and I can't get rid of it. And now I've been getting Symantec Tamper Protection Alerts with: Target: C:Program FIlesCommon FilesSymantec SharedccSetMgr.exe (or ...

malware removal and new virus protection

... new virus protection program(Norton Internet Security Online) and have been having problems eversince. ... particular number of files, then I tried running Windows Malware Removal Tool that also makes it ... FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF ...

Removed viruses and Malware, but something was missed

... cuts out. this after removing 43 Bloodhound type viruses and Malware that invaded ... : Norton Unerase Protection (NProtectService) - Symantec Corporation - C:Program ... -10-01 22:07:03 -------- d-----w- c:program filesMalwarebytes' Anti-Malware 2010-10-01 22:07:03 -------- d-----w- c:docume~1alluse~ ...

Redirect Virus/Misc. Malware, Need help removing

... google. I also have some other minor malware that my anti virus has picked up and want to make sure its all removed. ... access to the Hosts file, as i believe a redirect virus effects hosts... this may be the reason. Heres the log ... -12-5 98984] R2 Symantec AntiVirus;Symantec Endpoint Protection;c:program ...

Virus problem and can't post in malware removal thread

... Attack port 12647 Thread Win32/nuqel.E. Let me know what else you need to know. When I go to Malware removal that same Window security alert comes up.. Seems as though quite a few people I know got this today. I had AVG but could not open it today.So I uninstalled ...

Constant redirecting - access denied to malware removal programs - pop ups!!!!

... pop ups all over. More troublesome than anything, whenever I try to access an anti malware/removal program as soon as i run it, ... open it again it showed that my virus protection was turned off and when i tried to turn it back on it said that I could not turn it back on to restart and if the problem ...

Need help!! found trojan vundo h & trojan fake alert

... trojan vundo h and trojan fake alert, I formatted my system twice but virus seems to reappearing, i installed almost half a dozen anti viruses and malware removers without any help, Also a website called "http://www. ... /CHECK O4 - HKLM..Run: [On-Line Protection] C:PROGRA~1QUICKH~1QUICKH~1CATEYE. ...

Pc virus and malware removed but pc very slow now

... he installed bitdefender and spybot. He ran both of these and found a few viruses and some spyware which he thinks he has removed, he also tried registry cleaning software from ... AHCG, TR/VIRTL.PORTSCA.2, HEUR/HTML.MALWARE AND FRONTRA. I dont know what else to tell you other than when I close the pc ...

Unremovable virus or malware problem?

... , I`m afraid my primary PC has acquired a virus or malware related program ... with it on my laptop). All other programs are still functioning, however both Symantec Antivirus and Malwarebytes Anti ... immediate errors. In an attempt to stop the virus (I assume I have one...), I tried to make an antivirus ...

Need help analyzing HiJack This log file.

... here to download spyware remove for total protection. Alert! You are receiving ... and it looks like many people have solved this problem using HiJack This. Symantec AV has not found anything. I am attaching a HiJack ... - Service: SAVRoam (SavRoam) - symantec - C:Program FilesSymantec AntiVirusSavRoam. ...

I need Dr.Watson Virus help please, and MS Updates problem!

... thread below while googling for a solution for my latest computer problem. The author of the other thread had some issues ... ... } - ... dll O23 - Service: AVG7 Alert Manager Server - GRISOFT, ...

Solved: virus.. popup "Malware Wipe" "the spy guard" and alot of commercials

... all known viruses and worms. * Visit Website * Free Scan Malware ... spyware cleaner with realtime protection. * Visit Website * Free ... Award-winning spyware removal utility that will help you fighting all kinds ... one of the following approved software products: Malware Wipe * Over 40,000 threats ...

Solved: System Alerts and hijacked home page

... , click this baloon to download malware removal software. Also System Alert: System has detected a ... - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe ... O23 - Service: COM Host (comHost) - Symantec Corporation - C:Program FilesCommon ...

Solved: Internet Explorer keeps Rediriecting To Malware/Virus Websites

... ran VundoFix but it didn't find anything. First thing I knew I picked up this malware from a bad email I opened by ... the point of having an anti-virus and spyware remover if it only detects problems when it's already on your machine? Anyway ... .exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - ...