N360 takes 100%

N360.exe (from Comcast) usually takes over 50% and often takes 98-100% of the processor.  Can it be controlled?  I have completely uninstalled and reinstalled it without improvement.

donaldjackson

Have used Norton from Comcast since Comecast switched to Norton a few years ago.  But I don't think there was a N360.exe in it until recently.  If there was, it didn't cause any trouble.  Now, it has practically taken over my machine.  I did uninstall completely and then reinstall a few days ago in hope that would help, but it did not.


OS Version: Microsoft Windows XP Home Edition, Service Pack 3, 32 bit
Processor: Intel(R) Pentium(R) 4 CPU 1600MHz, x86 Family 15 Model 0 Stepping 10
Processor Count: 1
RAM: 1279 Mb
Graphics Card: NVIDIA RIVA TNT2 Model 64/Model 64 Pro, 32 Mb
Hard Drives: C: Total - 71797 MB, Free - 13124 MB; F: Total - 38154 MB, Free - 25048 MB;
Motherboard: ASUSTeK Computer INC., P4B-LA
Antivirus: Norton Security Suite, Updated: Yes, On-Demand Scanner: Enabled

 

Version: 21.1.0.18
End Point ID: {074f5e1e-2dd6-11e1-bc38-0050fce7d50f}
LiveUpdate Channel: Traditional
Current SKU: 21317287
Family SKU: 21291129
Media SKU: 21317287
Vendor Name: Comcast

Thank You

Thanks for the info donaldjackson,

 

Please tell us more about the "On-Demand Scanner" - are you referring to a separate scanner sucvh as Malwarebytes Anti-Malware (MBAM), SuperAntiSpyware (SAS) or another addtional security product besides Norton?  Also if MBAM or SAS,please tell us if it is the Free or the Pro version.

 

The N 360.exe started with the version 21.X.X of NSS - so it's presence is normal, although the excessive CPU is not. 

 

Please open NSS, select Support and then Get Support form the main page and see if it fixes anything or provides an error code.  If no help, see beleow.

 

You "uninstalled/reinstalled" completely - did you use the Norton Removal Tool (NRT) or did you just remove via the Add/Remove Program function?  Please try the instructions in this NSS FAQ if you did not use the NRT.

 

Please post back with resutls.

I had no idea what "On Demand Scanner" meant.  I just copied the results of SysInfo.exe and pasted them.  But looking at my programs, I see that Malwarebytes Anti-Malware version 1.75.0.1300 is installed and was last used on 9/10/13 when someone was trying to help me.  It would be the free version, but I think it has only been used one time about 6 months ago and was only to give info to someone who was trying to help me. 

 

I am uncertain whether I used the NRT or not, because I remember looking at FAQs and I remember rebooting and running liveupdates repeatedly.  I will gladly do it that way if you think it might help.

 

Norton Autofix says We did not find any issues with Norton Security Suite.

 

The person who tried to help me a few months ago had me install and run HiJackthis and give him the logfile.  I just ran it again and am attaching it below, it case it tells you anything.

 

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:41:38 AM, on 3/27/2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\SecureBackupShare\ComcastSecureBackupSharebackup.exe
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Program Files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Norton Security Suite\Engine\21.1.0.18\N360.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Motive\pcCMService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton Security Suite\Engine\21.1.0.18\N360.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\PROGRA~1\VISION~1\ONETOU~2.EXE
C:\Program Files\Comcast\pcTrayApp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\SecureBackupShare\ComcastSecureBackupSharestat.exe
C:\Program Files\Outlook Express\msimn.exe
C:\WINDOWS\SYSTEM32\spider.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Norton Security Suite\Engine\21.1.0.18\symerr.exe
C:\Program Files\Norton Security Suite\Engine\21.1.0.18\symerr.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/flash/index.cfm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Security Suite\Engine\21.1.0.18\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Security Suite\Engine\21.1.0.18\IPS\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security Suite\Engine\21.1.0.18\coIEPlg.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [OneTouch Monitor] C:\PROGRA~1\VISION~1\ONETOU~2.EXE
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Comcast_McciTrayApp] "C:\Program Files\Comcast\pcTrayApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Global Startup: Secure Backup and Share Status.lnk = C:\Program Files\SecureBackupShare\ComcastSecureBackupSharestat.exe
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {10E0E75E-6701-4134-9D95-C0942ED1F1C8} (Snapfish Outlook Import ActiveX Control) - http://photos.walmart.com/WalmartOutlookImport.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O16 - DPF: {AFDD01B0-7ABB-11D9-9669-0800200C9A66} (MFInstall Class) - http://c.ancestry.com/MFInstall/MFInstall.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://photo.walmart.com/photo/upload/XUpload.ocx
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O20 - Winlogon Notify: TPSvc - TPSvc.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Comcast Secure Backup & Share Backup Service (ComcastSecureBackupSharebackup) - Secure Backup and Share - C:\Program Files\SecureBackupShare\ComcastSecureBackupSharebackup.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intuit Update Service (IntuitUpdateService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
O23 - Service: Intuit Update Service v4 (IntuitUpdateServiceV4) - Intuit Inc. - C:\Program Files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Norton Security Suite (N360) - Symantec Corporation - C:\Program Files\Norton Security Suite\Engine\21.1.0.18\N360.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: pcCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\pcCMService.exe

--
End of file - 8750 bytes

Please open your MBAM, select the Protection Tab and see if it says Start Trial as shown below:

MBAM Start Trial.PNG

 

If it says start Trial, then it is OK to leave it as it is.  Let us know.

 

It has been too long since I looked at a HJT log to be accurate, so I will not attempt to look at it.

 

Just one thing I did notice is that it appears you have the Comcast Toolbar Installed, it has been known to cause problems in the past and it is suggested to remove it as it is not effetive.

 

To remove it:

 

Navigate to the folder:  C:\Program Files\comcasttb (C:\Program Files (x86) on 64 bit systems).

 

Click on comcasttb and you'll see a new folder "comcast antispy" open that contains an uninstall file.

 

Run the uninstall program. 

 

Reboot your system and double check the process is no longer running (Task Manager). 

 

You'll then need to manually remove the folder called "comcasttb".

 

Note: If the comcasttb folder is not located in the Program Files folder, you will need to search your hard drive for it.

 

Also if none of the above helps, I still recommend the instructions in this NSS FAQ  as a final attempt.

Yes, MBAM looks just like your picture.  It also said update is 204 days out of date.

 

I did not find a comncasttb folder or a subfolder under comcast with that name.  Windows Explorer could not find a folder or file with comcasttb in it, so I guess it doesn't exist on my machine.  Neither do I know how to recognize the comcast toolbar.  I run Windows Task Manager to see what is happening when it appears that nothing is happening, and I don't see anything under those processes that I can identify as comcast toolbar.  Windows Task Manager shows that N360.exe is runnming under "owner" at 00 and under "SYSTEM" at 99% of cpu.  Should it show up twice?  Of course it says that I don't have authority to end the process under "SYSTEM" which I have tried to do numerous times in total frustration.

 

It is likely that the instructions under FAQ is the way I did it, but I will do it again just to be certain.  You say "as a final attempt."  Everyone who has tried to help has given up.  If this becomes a final attempt, does that mean that I will have to get some other virus protection, and if so, do you have a recommendation?

Hi donaldjackson,

 

Nope, I won't be giving up if I have my way - perhaps my choice of words were bad - I was referring to trying all the things I had listed in my post and as a final attempt (as in after doing all else I has suggested in that post) do the FAQ!

 

The two instances of N360.exe are normal - one for owner and one for system is normal.  You can not end the process, as it essentially turns off your protection - Norton has function called Norton Tamper Protection that stops anything (including Windows) from making changes to the program, especially a change that would disable it. 

 

Before doing the FAQ - look in Control Panel > Add/Remove Programs and see if the Comcast Tool Bar (may be called Comcast AntiSpyware is listed as installed.  If it is uninstall it and see if there is an improvement.

Supposed to be fixed in 21.2, due probably the end of April for the Comcast edition.


scree wrote:

Supposed to be fixed in 21.2, due probably the end of April for the Comcast edition.


Care to share where you got that information?


yank wrote:

scree wrote:

Supposed to be fixed in 21.2, due probably the end of April for the Comcast edition.


Care to share where you got that information?


Sure.... Here:

 

http://community.norton.com/t5/Product-Update-Announcements/Product-Update-21-2-of-Norton-Internet-Security-Norton-360/ba-p/1107654

 

At the bottom where the changes in 21.2 are listed, it says "- Fixed issue where high CPU and I/O usage during Idle." Though it says at idle, maybe it will also apply to other erroneous high CPU usage as well.

Hi scree,

 

I think Yank was referring to "... due probably the end of April for the Comcast edition."


Rainbow_2 wrote:

Hi scree,

 

I think Yank was referring to "... due probably the end of April for the Comcast edition."


Oh... Well, going by past updates (I am a Comcast Norton Security Suite user), it typically takes at least 3 weeks for any major version update to come out for the Comcast edition.  So, by logical deduction, since the 21.2 update for Norton 360 has occurred fully on March 25, I would predict it should hopefully happen by the end of April for Comcast. :)

Hi donaldjackson,

 

Sorry for the slight detour this thread has taken and I was part of the problem by asking where scree got the information that did not appear to apply to your situation (not occurrIng in idle), and there never is a firm date for a release of a Norton Security Suite upgrade.  As Norton has said many times - it will come when it is ready. Norton is getting better at proviing a more timely upgrade for Comcast NSS users, so things may move quicker than in the past - although no promises.  So rather than wait on the release to see if that helps, let's try something else:

 

Now, please see the following post I made in 2011 on the Comcast Forum in regards to the total removal of Comcast Toolbar.

 

http://forums.comcast.com/t5/Security-and-Anti-Virus/What-is-ComcastAntiSpy-exe/m-p/1076135/highlight/true#M83540

 

Yes, I use USAF_E-8_RET as my user name on the Comcast Forum.

 

I dug out some older notes and found the following:

 

Navigate to the folder:  C:\Program Files\CA.  You'll need to remove another component which was installed along with the toolbar.  This is called "ppclean" aka "Ppclean Custom Cleaning  Utility", published by Computer Associates International and MacAfee Security, a division of Network Associates. 

 

 I have also found another reference that shows "Xfinity Toolbar" as the entry in Add/Remove Programs for the toolbar.

 

Please let us know how things go

N360.exe (from Comcast) usually takes over 50% and often takes 98-100% of the processor.  Can it be controlled?  I have completely uninstalled and reinstalled it without improvement.

donaldjackson

Thank you for showing determination.  I did a remove completely including use of the NRT and then reinstalled as recommended, Live Updated several times.  Don't know whether it helped any or not.  I have seen it using 00, but as soon as I try to do something, it will jump up, often to 99.  When it is using 99% or more, the applications show as "Not Responding."  After awhile, n360 will drop back enough to let them respond. 

 

There is no program installed that begins with "Comcast" nor "Xfinity" nor anything that I can tell relates to Comcast, nor do I believe there ever has been a Comcast toolbar installed.  I never willingly allow any program to put its toolbar on the machine.

The internet is actually slower, lotsof the time, than it was when I used dial-up.  Even a sound recording will break up when n360 jumps up to about 99.

 

I furnished information about my machine early on in this discussion so that anyone who tried to help would be able to tell if the problem is that the Norton Security Suite is too much of a resources hog to run on my old machine and leave any for applications I want to run.  I still wonder if that is the case, and whether I will end up finding suitable protection that doesn't use up most or all of my processor. 

 

I am grateful for the time and effort you have given in trying to help.  But everyone who has tried to help within about the last year has had to give up.  There may not be a solution that is compatible with my machine and the NSS.

I see you did not mention looking for the following:

 

Navigate to the folder:  C:\Program Files\CA.  You'll need to remove another component which was installed along with the toolbar.  This is called "ppclean" aka "Ppclean Custom Cleaning  Utility", published by Computer Associates International and MacAfee Security, a division of Network Associates.

 

Also, please run LiveUpdate as I just received the new version 21.2.0.38 upgrade on my Comcast NSS system this AM.


donaldjackson wrote:

... 

I furnished information about my machine early on in this discussion so that anyone who tried to help would be able to tell if the problem is that the Norton Security Suite is too much of a resources hog to run on my old machine and leave any for applications I want to run.  I still wonder if that is the case, and whether I will end up finding suitable protection that doesn't use up most or all of my processor. 

...


Well after seeing your machine specs, I would say the #1 problem is the limited 1279 Mb RAM, along with the low 1.6 GHz single-core processor speed.  You're basically lucky you can do anything worthwhile on that machine with any antivirus product installed.  Even if an antivirus product used minimal RAM, you will always get some kind of noticeable delay or the not repsonding issue because of the low processor speed (and nearly constant swapping RAM to pagefile).

 

Too bad nothing has helped, as Norton is a great av product for computers that meet the realistic specs.

Scree - I have the same symptoms as donaldjackson.

About every 2-3 minutes, my PC goes to 95-100% and keeps it hostage for about 45-60 seconds.

Task Manager shows N360 to be the 'bad guy'

 

I am running NSS 21.2.0.38 from Comcast

XP sp3

Pentium(R) 4 CPU 3.0GHz with 2.0 GB ram

I think that should be enough horsepower.

I have been following this thread to see if someone comes up with a solution

 

I have a configuration of i3 with 2,6 ghz ,6 GB Ram and 123 GB HDD free space.  But still Norton 360 is taking 100%   ( When I bought the product, Norton technical people and sales people certified that Norton will run efficiently in my machine taking less memiory and cpu.)