Norton Internet Security / Norton AntiVirus

[Niko233]

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Reconstuction:

inserting USB flash drive (4GB) to USB port

open My Computer

Right click: Scan with norton

Scan takes about 7-8 minutes - too long on that time and I push Stop scan in the scanning window. additional window appeared and ask me - Do I joking or not - I said - not, please stop.

Stopping procedure taking about 3-4 minutes and did not complete, but I have no time and no data being writing to flash - I decide to eject the flash and do this, than after 1 second Windows crash window about Norton appeared.

Windows Logs (in order from start to end):

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

So by ejecting USB flash drive while it scanning by Norton I can leave the "Norton Protected computer" without Norton defence.

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

--

WinXP SP3 32bit

NIS 18.1.0.37

[AllenM Norton Fighter]

Hi Niko233,

We cannot see your images yet as they must be approved by a moderator first.

Is the message indicating that NIS crashes when you eject the USB device during a scan? You mentioned "without Norton defense". If NIS is indeed crashing as a result of this, I would not be surprised. What hapens after you restart the computer? Does NIS then come up and function OK?

I will also test this out on my test laptop and see if I can reproduce this but any additional details you can provide would be helpful.

Best wishes.

Allen

[AllenM Norton Fighter]

Hi Niko233,

I am not able to reproduce this on my Windows 7 laptop. When I click on Stop scan NIS completes immediately with no delay.

If I remove the USB flash without clicking on Stop scan, NIS simply comes back within a few seconds and reports that scan is complete with no problems found.

Neither of these results in any sort of crash on my computer so the more detail you can provide the better.

I will be sure and take a close look at the Windows events you posted when your images are viewable.

As asked in your other thread, do you have any other security software installed besides NIS?

Also, can you go ahead and perform a chkdsk /r on your USB flash drive? I want to make sure it does not have any errors which could be causing a READ issue and resulting in this problem.

Best wishes.

Allen

[Niko233]

Hi again!)

>Is the message indicating that NIS crashes when you eject the USB device during a scan?

Yes, it is.

>What hapens after you restart the computer? Does NIS then come up and function OK?

Yes, NIS loaded fine and probably with the same functionality. But Is this good that typical axctions can crash Norton? So,  this is unstable defense, offering by Norton, is not it? Or this is good enough, that You think about it? 

>I will also test this out on my test laptop and see if I can reproduce this but any additional details you can provide would be helpful.

Hmm.. All main info already posted. Ask for specific details, please.

[AllenM Norton Fighter]

Hi Niko233,

I agree that a crash is not good but given that I cannot reproduce this, it is prudent for you to do the chkdsk /r on this USB flash drive so we can determine if there are any errors on the flash drive which could be triggering this.

I don't consider however removing a device during a scan in progress as a "typical" action.

Also, the fact that NIS took so long after you clicked Stop scan makes me wonder about the state of the USB flash drive.

I agree that if there is a bug on this it should be fixed but doing the chkdsk is one of those important checks we should perform to charecterize the problem.

I trust this makes sense.

Best wishes.

Allen

[Niko233]

>When I click on Stop scan NIS completes immediately with no delay.

May be it was scanning a large file with many files inside on the not so speedy flash... i do not know, flash was from my friend.

>As asked in your other thread, do you have any other security software installed besides NIS?

No, it it the same computer

>Also, can you go ahead and perform a chkdsk /r on your USB flash drive?

May be in future, but now flash drive is busy by owner

>I want to make sure it does not have any errors which could be causing a READ issue and resulting in this problem.

Windows logs screen must help to determine this, but this events appeared directly after ejecting the flash - may be that's why was read errors, but read errors must not finish by normal program crash - it must be foresee and it is much more relating to security programs. as I think, but everyone can make mistakes... 

[AllenM Norton Fighter]

---

Niko233 wrote:

>When I click on Stop scan NIS completes immediately with no delay.

May be it was scanning a large file with many files inside on the not so speedy flash... i do not know, flash was from my friend.

>As asked in your other thread, do you have any other security software installed besides NIS?

No, it it the same computer

>Also, can you go ahead and perform a chkdsk /r on your USB flash drive?

May be in future, but now flash drive is busy by owner

>I want to make sure it does not have any errors which could be causing a READ issue and resulting in this problem.

Windows logs screen must help to determine this, but this events appeared directly after ejecting the flash - may be that's why was read errors, but read errors must not finish by normal program crash - it must be foresee and it is much more relating to security programs. as I think, but everyone can make mistakes... 

---

Hi Niko233,

When you have access to the USB flash drive again, you can also check whether write caching is enabled or disabled. Please see the following link for information on how to check this.

http://www.ehow.com/how_5051640_disable-loss-corruption-windows-xp.html

If write caching is enabled, please disable it and see if the problem still occurs. When write caching is enabled it is not recommended to unplug the USB flash drive without using the safely remove feature. When write caching is disabled you should be able to remove the device at any time.

Best wishes.

Allen

[Niko233]

Thanks for info, but where is write caching appears if after inserting of Flash drive procedure was only Scan by NIS procedure?

I think NIS only reading files from device, and write procedure can be only in FAT zone, which is so fast (only deteting malware, if they was found on device)

[AllenM Norton Fighter]

---

Niko233 wrote:

Thanks for info, but where is write caching appears if after inserting of Flash drive procedure was only Scan by NIS procedure?

I think NIS only reading files from device, and write procedure can be only in FAT zone, which is so fast (only deteting malware, if they was found on device)

---

Hi Niko233,

These are standard troubleshooting procedures intended to help narrow down the problem. So I would still recommend running chkdsk /r and check the caching on the USB flash drive.

Best wishes.

Allen

[Niko233]

Yes, as I saw yesterday, there is 1 unreadable folder on the flash - we can't enter this folder to it get directory/file list, but again there was no time to fix it or diagnose more widely.

And again: Norton should not crash on such errors (Norton should not crash ever, only show a corresponded to conditions message or add a such history item or just going on to work normally) or user's computer will be unprotected until reboot and reboot may have to wait some time to complete the user's work (tens of minutes or hours), isn't it?

Thanks to help to troubleshoot!