12-16-2011 06:59 AM
How can I be sure that Idle Full System Scan is indeed not running? In spite of the OFF setting, I have sometimes the feeling it is running regardless. Any ideas/suggestions? Best, CBA
12-16-2011 07:31 AM - edited 12-16-2011 07:35 AM
Hi CeeBee,
I will assume you are talking abut the Full System Scan.
Open NIS, on main page Click on Performance > Norton Tasks and see when the last time it says the Full System Scan was completed. If it has not changed from the last time (prior to or at the time you changed the settting you showed), then it is not running in the background. You can also check your scan history for the last Full System Scan that was run.
12-16-2011 08:33 AM
Hi Yank, thanks.
Yes, Full System Scan, which would run during idle periods, if my settin was "ON". I knew where to look to check this per the "'book", however, my concern is that it was running regardless in the background .. even though I have no entries in the logs.
The reason for asking is that I experiece from time to time a Commit Charge (XP Pro/Sp3) increase of +/-140mb. The system in question is old, lean and with a total of 512mb, so every mb counts. I normally have a commit charge of around 285-290mb after boot .. so when I start out with circa 430mb after boot it's a problem of sorts. Typically, the higher commit charge stays with me for a week or 10 days or so .. befor the lower commit charge returns for 3-5 days before it goes up again.
If I recall correctly, it all happened after I upgraded to NAV 2011 last May, and, thus my suspicion that NAV has something to do with this. And, yes, I have removed all Norton progs, run the cleaner, and reinstalled. No difference.
I have NAV 2102 19.2.0.10 and no other active (only demand) virus/malware progs installed. Let me add a print-screen of XP's task manager showing a "normal" boot, and, then, ditto one showing an "elevated" boot. The columns differ, but, VM Size is in both. Again, this is a good/normal boot:
And this is what I call a bad/elevated boot! Note the VM Size increase for ccsvchst.exe, explorer.exe and one svchost.exe.
Any ideas here? Also non-NAV culprits or hidden processes which behave like this? Best, CBA
12-16-2011 11:40 AM
As the 2nd image (of what I call a bad/elevated boot) didn't show, here it is. Note the VM Size increase for ccsvchst.exe, explorer.exe and one svchost.exe.
Any ideas here? Also non-NAV culprits or hidden processes which behave like this? Best, CBA
12-16-2011 12:13 PM - edited 12-16-2011 12:14 PM
Hi CeeBee,
This isn't a Norton issue. Your symptoms are exactly those that DaveH and I have experienced, and which Reese Anschultz had indicated were possibly related to a Microsoft memory leak that was introduced in the KB2616676 update. DaveH fixed the issue by investigating the problematic crypt.dll file and removing the update, but there is a hotfix for this that Reese mentions. I have not installed the hotfix, so I cannot say if it fixes the issue (I'm just living with the problem, wondering if MS will ever release an update to fix it). Please see the following thread for that discussion:
12-16-2011 12:20 PM
Hi...
I remember that issue SendOfJive, but I do not see an update on the Hotfix from Microsoft.
FWIW,
Atomic_Blast :)
12-17-2011 02:07 AM
Hello SendOfJive,
This isn't a Norton issue. Your symptoms are exactly those that DaveH and I have experienced, and which Reese Anschultz had indicated were possibly related to a Microsoft memory leak that was introduced in the KB2616676 update.
Thanks, interesting. I'll look into the link provided. But, note that my problems started last May and are intermittent. Some good days followed by several bad ones. In the link below I posted my initial query on this:
At the time I tought I had found the culprit, an orphaned file (qdfsdrv.sys - Norton Filter Driver 7.0.0.15), which was part of Norton CleanSweep (removed a long time ago). But, as it turned out, this file wasn't the the cause of my problems.
DaveH fixed the issue by investigating the problematic crypt.dll file and removing the update, but there is a hotfix for this that Reese mentions. I have not installed the hotfix, so I cannot say if it fixes the issue.
Do you refer to Crypt.dll, Crypt32.dll or CryptSvc.dll? Searching for the Crypt.dll file, I get no hits, but, I have a bunch of the other ones (below).
Do you think the referenced hotfix applies in my case? If so, I may try it next time my "symptons" start show again. Right now I'm fine .. booting up at around 290mb or so. Or, did Reese indicate that a hotfix is in the offing ... in my lifetime? Best, CBA
12-17-2011 04:06 AM
... (I'm just living with the problem, wondering if MS will ever release an update to fix it).
As a postscript, I'm current on all Microsoft Update hotfixes. Just ran MBSA to confirm it. No red flags...!
12-17-2011 11:32 AM
I really can't recommend a course of action, as I have not installed the hotfix myself, and I agree with DaveH, that you should not roll back the update that apparently caused the issue, due to the important security issue that it addresses. If you have read the thread I referenced and read the Microsoft write-up on the hotfix, then you know as much about this as I do.
12-17-2011 01:05 PM
I really can't recommend a course of action, as I have not installed the hotfix myself, and I agree with DaveH, that you should not roll back the update that apparently caused the issue, due to the important security issue that it addresses.
Hi SendOfJive, fair enough .. sounds reasonable. Thanks!
I'll pick up on some of the hints given, the thread referenced included. For now, I think I have enough to work with. If need be, I may experiment with some of the variables mentioned. But, who knows, maybe MS sneaked in a fix in the most recent Hotfix Tuesday delivery. Keeping my fingers crossed...
Doing a quick search on the web, I also noted that this 'memory leak' issue is being discussed and/or addressed by many. Best, CBA
