NIS 21.2.0.38 - High CPU Usage

My WinXP SP3 desktop received this "phased" update this morning.  There is still a high CPU usage problem from earlier versions that was discussed here: http://community.norton.com/t5/Norton-Internet-Security-Norton/High-and-almost-Constant-CPU-usage/td-p/1043071

 

When the NIS Dashboard is closed, CPU usage is normal.  When the NIS Dashboard is opened, NIS CPU usage goes up to between 12-25%.

 

 HighCPU.jpgHighCPU1.jpg

My WinXP SP3 desktop received this "phased" update this morning.  There is still a high CPU usage problem from earlier versions that was discussed here: http://community.norton.com/t5/Norton-Internet-Security-Norton/High-and-almost-Constant-CPU-usage/td-p/1043071

 

When the NIS Dashboard is closed, CPU usage is normal.  When the NIS Dashboard is opened, NIS CPU usage goes up to between 12-25%.

 

 HighCPU.jpgHighCPU1.jpg

At this point it should not matter. Its a waste of time and resources to be supporting XP any further. Its dead next month at the start of April. What they "fix" for XP could mess up 7 and 8 users.


Tony_Weiss wrote:

Hi nikki605,

 

I've sent you a Private Message on the community with a request for logs. If you're able to get those to us, we'd appreciate it. Thanks.


Tony - Log files uploaded as requested.


FattiesGoneWild wrote:

At this point it should not matter. Its a waste of time and resources to be supporting XP any further. Its dead next month at the start of April. What they "fix" for XP could mess up 7 and 8 users.


In my opening post, I included a link to a previous topic.  If you read that topic, you'll find that this problem also affects some Win7 users.


FattiesGoneWild wrote:

At this point it should not matter. Its a waste of time and resources to be supporting XP any further. Its dead next month at the start of April. What they "fix" for XP could mess up 7 and 8 users.


How would fixing an issue on one OS cause issues on another OS? Considering in the past OS specific fixes have been made and not affected another OS negatively. I guess no one takes into account Windows Vista either. By your logic it's probably a waste of time to support it as well.

 

 

Hi,

I'm running Windows 7 SP1 and Norton 2014 (21.2.0.38) and every now and then (roughly 3 hrs) one of the NIS.EXE processes will take over the system and use between 40 and 50% CPU and will not release it again until I reboot.

I have turned off EVERYTHING in NIS bar AV, FW and Malware (so all the performance nonsense and all the 'phone home' nonsense) the 'attacks' have become less frequent but are not going away.

I have done a full uninstall using NRT, rebooted, run NRT again to check for any traces, run CCLEANER, rebooted - I ran the system without protection for a few hours and had no issues at all - reinstalled NIS and within an hour or so ... bang the same problem ...

as it happens this is a quiet weekend for me so rebooting is not an issue but at present I'm wanting to uninstall NIS and put on something that will let me use my system - it's incredibly frustrating I'd really appreciate some help to get NIS running the way it used to.

MV.

Hi MarkVent:

 

Welcome to the Norton forum.

 

You might find some helpful suggestions in natey2's thread here titled NIS v21 excessive disk I/O, even with Advanced Event Monitoring OFFMessage # 6 of that thread contains instructions for performing a clean re-install of NIS (note the comment about selecting "Please remove all user data"  when uninstalling NIS from the Control Panel) as well as comments about a known bug in NIS v. 21.2.0.38 that still affects some systems.

-----------
MS Windows 32-bit Vista Home Premium SP2 * Firefox 28.0 * IE 9.0 * NIS 2013 v. 20.4.0.40
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS

Hi MarkVent,

 

Do you now or have you ever had any other Anti-Virus or security program insatlled that could be running in real-time?

 

-  something like MBAM Pro (or MBAM Free with the trial activated), SAS Pro, Spybot S & D with Tea-timer enabled?

 

If you had another AV installed,  did you use that product's removal tool to remove it?

 

A guess on my part:

I ask as if something is conflicting with NIS, that something might be prompting Norton Tamper Protection to repeatedly attempt to protect NIS while whatever it is that is running is doing it's thing and causing the conflict.  By the same token, NTP may also be preventing whatever is running from compleeting - thus all is good after a restart - until that other "something" starts running again - be it calling home for an update or whatever.

 

 


MarkVent wrote:

Hi,

I'm running Windows 7 SP1 and Norton 2014 (21.2.0.38) and every now and then (roughly 3 hrs) one of the NIS.EXE processes will take over the system and use between 40 and 50% CPU and will not release it again until I reboot.

I have turned off EVERYTHING in NIS bar AV, FW and Malware (so all the performance nonsense and all the 'phone home' nonsense) the 'attacks' have become less frequent but are not going away.

I have done a full uninstall using NRT, rebooted, run NRT again to check for any traces, run CCLEANER, rebooted - I ran the system without protection for a few hours and had no issues at all - reinstalled NIS and within an hour or so ... bang the same problem ...

as it happens this is a quiet weekend for me so rebooting is not an issue but at present I'm wanting to uninstall NIS and put on something that will let me use my system - it's incredibly frustrating I'd really appreciate some help to get NIS running the way it used to.

MV.


Please note in my opening post that I am ONLY seeing higher CPU usage when the NIS Dashboard is open.  With the Dashboard closed, CPU usage stays near zero.  It sounds like your symptoms are different.

" Please note in my opening post that I am ONLY seeing higher CPU usage when the NIS Dashboard is open.  With the Dashboard closed, CPU usage stays near zero.  It sounds like your symptoms are different"

 

Hi,

 

You see this behavior because NIS.exe user related process does not work efficiently with RAM.

Once the NIS Dashboard is open, and closed, you will never see, until you reboot, the process being able to free the extra used memory.

It was also present with NIS 2013 & XP.

I'm having this issue too on XP SP3.

Last working version was NIS 2012.

I do not think that it will be ever considered as a priority for Symantec in order to fix it, especially for XP systems.

With Windows 7 systems, you will notice that when you close the NIS dashboard, after more or less 30 secs, you will see both NIS.exe processes freeing the extra used memory and revert to normal/low levels about 5 MB's each NIS process.

With XP it's impossible, until it is fixed.

Hope this helps,

 

Regards,

 

 

Hi,

 

thanks for your response, I have done a full and complete uninstall of NIS 2014,  using the NRT, rebooted, run the NRT again to check for any traces that might be left, rebooted, run CCLEANER, rebooted and reinstalled and NIS was fine for  a few hours and then began behaving erratically again.

 

I presume after an update was downloaded.

 

Regards

 

Mark.

Hi,

 

I don't have anything other AV running in realtime.

I do have a System Performance Monitor running - when the problems with NIS started one of the first things I did was to uninstall it completely (Uninstall, reboot, CCLeaner, reboot) the issue remained - I then did the complete uninstall of NIS (as per previous post).

 

I've done my best to remove as much as I can from startup to get as clean a boot as I can into normal mode windows and the issue remains.

 

I'm presuming NIS is doing a scan of some kind, but my processor isnt idle when it does it (I dont notice an appreciable disk IO 'bump' nor internet traffic) ... 

 

bit bemused by it all really - it's only happened recently the only thing I can possibly link it to was an MS update maybe 3 or 4 days before ... other than that nothing changed on the system.

 

perhaps there is some advanced logging I can turn on to see what NIS is doing / what it thinks is happening etc.?

 

Regards

 

Mark.

"

thanks for your response, I have done a full and complete uninstall of NIS 2014,  using the NRT, rebooted, run the NRT again to check for any traces that might be left, rebooted, run CCLEANER, rebooted and reinstalled and NIS was fine for  a few hours and then began behaving erratically again."

 

Hi,

 

If you are talking to me, my previous post was for XP systems and if I'm correct you are using W7.

I have 2 W7 x64 systems and NIS always uses about 0% of CPU when doing nothing.

If you have Idle Optimizer set to ON try to switch it to OFF via the main NIS GUI - Settings.

See if this helps,

 

Regards,

Hi,

 

Also download ProcessExplorer from Sysinternals and see what is the "faulty" NIS process, if any, and what threads it useswhile high CPU activity..

 

Regards,


Apostolos wrote:

Hi,

 

Also download ProcessExplorer from Sysinternals and see what is the "faulty" NIS process, if any, and what threads it useswhile high CPU activity..

 

Regards,


Hi,

 

I just did that ...

 

it is NIS.EXE

TID: 7312

!endthreadex+0x80

 

Regards

 

Mark.


Apostolos wrote:

"

thanks for your response, I have done a full and complete uninstall of NIS 2014,  using the NRT, rebooted, run the NRT again to check for any traces that might be left, rebooted, run CCLEANER, rebooted and reinstalled and NIS was fine for  a few hours and then began behaving erratically again."

 

Hi,

 

If you are talking to me, my previous post was for XP systems and if I'm correct you are using W7.

I have 2 W7 x64 systems and NIS always uses about 0% of CPU when doing nothing.

If you have Idle Optimizer set to ON try to switch it to OFF via the main NIS GUI - Settings.

See if this helps,

 

Regards,


Hi,

 

sorry I was replying to the other two posts - 

 

yes mine used to do 0% when doing nothing, but it changed for no discernable reason - I have disabled the idle time optimizer and increased the amount of idle time required before the idle time scans kick in etc - all to no effect.

 

Regards

 

Mark.

Hi,

 

 

Post more info about: NIS.EXE

TID: 7312

!endthreadex+0x80

 

if possible.

 

Regards,

Hi,

 

Just a question, when a new set of Virus defs is downloaded via LU, do you let your pc idle enough time for the Idle Quick Scan to kick and finish??

Is it reported in Security History as completed?

Maybe there is an Idle Quick Scan pending and after a while it will start even if your pc is not idle because it is considered as a high priority item by Norton.

It could be this or it could be not.

Please post back...

 

Regards,


MarkVent wrote:
I'm presuming NIS is doing a scan of some kind, but my processor isnt idle when it does it (I dont notice an appreciable disk IO 'bump' nor internet traffic) ...

Hi MarkVent:

If you open your Norton Tasks window (Performance | Norton Tasks), does the run time of any of your background idletime tasks correspond to the period of high CPU usage by NIS.exe?

 

Norton Tasks Last Run.png

 

It would also be helpful if you could capture and post a screenshot of your Performance graph during one of these periods of high CPU usage by NIS.exe (see example below).  CPU consumed by Norton processes such as NIS.exe should be shown as yellow peaks in the graph, while non-Norton processes will be displayed as blue peaks.  Clicking inside the graph will display a pop-up listing acctive processes running on the computer.  See Yaso_Kuuhl's thread here for instructions for posting screenshots.

 

NIS v21 Bug PB0050.png

-----------
MS Windows 32-bit Vista Home Premium SP2 * Firefox 28.0 * IE 9.0 * NIS 2013 v. 20.4.0.40
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS