07-14-2008 03:34 PM
I had a problem with my Vista Pro machine where it was running quite slowly. In using the performance monitor tool to monitor what files were being accessed I found a service was constantly reading the off-line files cache in :
I added this directory to the exclusions lists in Norton Internet Security - performance problem solved.
Can anyone tell me why this might be ?
07-17-2008 05:42 PM
07-19-2008 11:41 PM
Process showing in Vista 'Reliability and Performance Monitior' is svchost.exe - which doesn't help much. However as I said adding the exclusion to NIS stopped this scanning.
I was on Norton Internet Security 2007 but took the free upgrade to 2008 - current version is 220.127.116.11.
Issue occurred on both versions.
07-25-2008 03:59 PM
Here is a brief explanation on SvcHost.exe:
Svchost.exe is a process on your computer that hosts, or contains, other individual services that Windows uses to perform various functions.
I believe Windows caches offline files under \windows\csc. If the original network resource is not available, then Windows will uses the corresponding offline file in this folder. I am not sure why svchost.exe is constantly acccessing offline files in \windows\csc. Are you using any application that maybe accessing these offline files?
NIS real-time protection is designed to monitor all file access. If files under this folder is being constantly modified and accessed, NIS will monitor the changes. Adding the directory exclusion helps with this particular performance issue, however, the machine is also a little less secure.
Let's see if we can identify which application is constantly accessing this folder, which may be the root of this performance problem.
07-25-2008 07:49 PM
I have a large quantity of off-line files synchronised with a Windows 2003 Server. Specifically several drive mappings are made off-line on my laptop. 99% of these files do not change.
I do not see why NIS would be constantly scanning the the off-line file cache. Its as if NIS is scanning the entire cache because it thinks the off-line files are continously changing ????
Have you set up and tested a similar situation ?
07-29-2008 06:01 PM
I confirmed with our QA team that we do test offline files/folders use cases. In addition, I tried to reproduce the scenario you described (offline folders in mapped drives, approx. 750MB in size) and was unable to replicate the performance issue you observed.
I suspect a component is continuously modifying a file (or files) in the cache folder, causing NIS to constantly rescan the file(s). If you are interested, I would love to troubleshoot this issue over a remote session to determine the root cause. I will send you my contact information via a private message.
If not, you can try to use utilities like FileMon (from Microsoft) to at determine if a component (i.e. SvcHost.exe) is modifying file(s) in the CSC folder.
07-31-2008 01:42 PM
Hi, ote: Filemon and Regmon have been replaced by Process Monitor on versions of Windows starting with Windows 2000 SP4, Windows XP SP2, Windows Server 2003 SP1, and Windows Vista. Filemon and Regmon remain for legacy operating system support, including Windows 9x.
So should i try Process Monitor :
08-05-2008 07:07 PM
Either one is fine. Since the new Process Monitor includes features in legacy FileMon, I would give that a try.
08-28-2008 07:19 AM