Norton Internet Security / Norton AntiVirus

[bleeper24 Super Spam Squasher Mobile Master (Norton Mobile Users Discussion Forum)]

Hi HW

Bombastus advised

====================================================================================================

In the Disk Activity field, you can see which process is reading and writing to the disk at any given time. For Norton, this would be ccSvchst.exe doing the reading and writing. Even if the driver is SRTSP64, it would still be ccSvchst.exe showing as being behind the disk activity. Check if you can see if it read and writes to a certain file(s) when the problem occurs.

====================================================================================================

            Further to the excellent tip given by Bombastus......if you are not familiar with some of the process names that you will see in Performance Monitor panel ........just click the tab marked "Overview " and it will give a more detailed description of the process you are tracking.... by showing which software is related to the event you are concerned with .

[HW1]

Bombastus and Bleeper 24,

Thanks for all the additional assistance. Now I'm just going to wait for something to happen. It's sort of like waiting for a sore tooth to start hurting again .

[HW1]

Just in case anyone is wondering what's happened with my computer, the answer is nothing. Obviously, that's good news, but I'm still assuming that eventually the problem will reoccur. When it does reoccur, I'll post as much information as possible.

Thanks again for your assistance. At least this time I'm more prepared to gather the necessary information.

Harvey

[HW1]

It's now 3 hours since I left my message stating that nothing was happening. About an hour ago, I updated Flash for Firefox and Flash for IE9. Shortly afterwards, I noticed that my hard drive was spinning continuously and system process ID 4 was using 13% of my CPU capacity (i.e. one processor) and seemed to be running nonstop. I ran some tests and it was definitely SRTSP64.SYS which was using the entire 13%. I forgot to check the Performance Monitor to see which files were being accessed, and without thinking, I turned off NIS Auto-Protect. As soon as I turned it off, system process ID 4 ceased using any of the CPU capacity and the hard drive stopped running. I then turned Auto-Protect back on, and everything continued to run normally.

I hope this provides some useful information. Hopefully, next time, I'll remember to check the Performance Monitor.

It does appear that, at least this time, the problem is definitely NIS Auto-Protect and that the problem was related to the installation of the Flash updates.

[HW1]

I've just had another occurrence of the problem with SRTSP64.SYS. This time I took a snapshot of the disk access according to the resource monitor. While the references to SCREENSHOTREADER and ABBYYFINEREADER are obviously irrelevant (since I just started them to take the snapshot), it also shows massive disk access of the readyboost cache and of the $LogFile.

I hope this helps. 

Unfortunately, after creating this messge, I discovered that there doesn't seem to be any obvious way to upload my screen snapshot. There also doesn't seem to be any obvious way to save the information in the resource monitor. Any suggestions will be appreciated. 

Thanks,

[HW1]

If anyone is still out there, it's happened again; and once again Resource Monitor says that there is a massive number of bytes being read from and written to the readyboost cache and the $LogFile.

[snehansh_asuri]

Hi HW1,

When this issue is happening (constant CPU spike), can you provide us the process monitor logs ? If you need steps on creating process monitor logs, please let us know.

Also, can I assume you do not see this issue with ReadyBoost disabled.

Thanks,

Snehansh

[HW1]

Thanks for the response.

First, I have to admit that I didn't consider disabling Readyboost because I have been using it for close to a year with no problem. However, now that you mention it, I'll try disabling it the next time the problem occurs (this may be in an hour or in a week; so far, I can't find any obvious pattern).

Secondly, please do provide me with the procedure for creating a process monitor log.

Thanks again,

Harvey

[snehansh_asuri]

I have sent you a private message on this.

Thanks.