Norton Internet Security / Norton AntiVirus

[e-claus]

Having aquired and installed Norton Antivirus 2011 I am becoming increasingly annoyed with the extremely heavy and noisy disk activity:

In 3 hours = 10,800 seconds (PC has been on)

the program (process) ccSvcHst.exe has performed

I/O-read: 548,000 = 50.7 reads/second

I/O-write: 63,600 = 5.9 writes/second

This is simply too much ... Please tell me how to REDUCE the disk activity!

Also I find it completely out of order to tell me that my computer is at risk (Danish: "Din computer er i fare") and putting a white cross in a red circle on the icon in task bar. - I have disabled SONAR because I find it superfluous and hypocondriatic.

Regards

Claus A.

[delphinium Norton Fighter]

Hi e-claus:

Did you remove any other antivirus software on your machine, using the appropriate removal tool,  prior to installing NAV 2011?  It will need to perform a full system scan.  Once it finishes its installation tasks, it should settle down unless there is a different issue.

NAV is showing a red X because the sonar is turned off.  On the main screen, where you turned it off, there should be a small i beside the setting that will say "ignore."  That should get rid of the warning, but your system will remain at risk since sonar is one of the main protections.  Sonar is actually quite important.

[e-claus]

Lyngby DK 2.2.2011

Delphinium: Thanks for the reply and the hints regarding checkmarks and red cross-marks.

My previous AV-SW was from Norton as well. It was removed with Norton_Removal_Tool.exe before installation of NAV 2011.

Inspired by your remark I performed a total system scan, which revealed a couple of non-critical tracking cookies, deleted in due course.

But ccSvcHst.exe continues to read and write excessively - at the time I'm writing this: During 1 hour 15 minutes (= 4500 seconds) the program has maged 704,000 I/O reads (156 reads/sec) and 236,000 I/O writes (= 52 writes/sec). - I am not aware of any 'different issue' - what do you have in mind? - I am very anxious to reduce these numbers, otherwise I may have to renounce using NAV 2011 ...

Regards

Claus A.

[MrSmite]

---

delphinium wrote:

Hi e-claus:

Did you remove any other antivirus software on your machine, using the appropriate removal tool,  prior to installing NAV 2011?  It will need to perform a full system scan.  Once it finishes its installation tasks, it should settle down unless there is a different issue.

---

This is in fact a different issue, one that has perturbed me for well over a year now. I even posted about it myself back in 2010.

If you run ProcessMonitor by Sysinternals and set the filter to only include ccSvcHst.exe, you will see an incredible number of registry and disk access operations.

In fact, in the 30 seconds it took me to write this post I had 36,966 "events" listed in ProcessMonitor. The annoying part of it is in a quiet room you can actually hear the disk activity every few seconds.

[delphinium Norton Fighter]

What operating systems and service packs are you both using?  Sorry MrSmite, I don't recall yours if it was posted.  Both my machines are very quiet, so the problem may be systemic, or related to other software.  Are either of you running Acronis backup software, searching or indexing going on in Microsoft?

Norton will scan everything going in or out of memory, so the more things that are happening in the machine will increase the scans.  Auto defraggers are another cause for this type of behaviour.

[Bombastus]

The numbers of reads and writes e-claus describes are (unfortunately) standard. There is no fix because there is nothing to fix. This is how NIS reads and writes during normal operations.

[e-claus]

If this is how NAV 2011 operates, I'll have to find another antimalware (& -virus) system. This is completely intolerable.

I get the impression that the Norton people want to save ourselves from our ourselves - just like Microsoft - by taking over our pc's instead of just supplying the tools with comprehensive and easy-to-understand user manuals.

regards and thanks for the replies

Claus A.

[AllenM Norton Fighter]

HI e-claus,

Curious, are you seeing an actual problem with the computer not being responsive or slow to react to user input? Or are you just annoyed at the "numbers" you are seeing?

The vast majority of users cannot even tell that Norton is running most of the time.

In fact, over the years Norton has gotten so much lighter in terms of CPU and memory resources that a lot of users who left Norton some years ago has returned because of just how much improvement there has been!

If your computer meets the minimum system requirements you should not even notice it running most of the time. If you are having problems with high CPU utilization or memory usage of NAV, then there is probably something we should look into and get it corrected. Otherwise perhaps you should not be so concerned about "numbers" but more about how well it protects your computer. Norton is consistently rated near the top of the list in terms of the protection it offers.

Just my two cents worth.

Best wishes.

Allen

[MarkAtHome]

I am interested in knowing what precisely NIS is doing during those read/write instances, so I can make an intelligent decision as to whether I want those to continue. If I choose to disable features running in the background, I expect that that would apply to NIS as well.

[e-claus]

Lyngby DK 19.2.2011 20:28 (please do not use US date format)

I'm hearing the harddisk access numbers - and seeing them as well using Windows Taskmanager enhanced with Prio. The frequency is as described in my first posting of 31.01.2011. The excessive disk activity does not see to slow down the machine - it is just extremely annoying an irritating.

I do not know why or what NAV 2011 is doing performing these I/O-readings and -writings.

My system is a 2.4 GHz Pentium 4 with 2 GB of RAM, running Windows XP SP2 (save possible remarks about SP3). 2 harddisks 76 GB & 240 GB.

Regards

Claus A.