My DNS logs keep showing one of my PC's contacting "download.iolo.net" every 6 minutes. Doing a clean boot of Windows 10, and the issue keeps happening. After further research to determine what on my PC is trying to contact iolo.net (I do not have any of their products installed), it turns out to be a Norton Process called "Integrated Scanning Tools Module" with the file making the call named ToolLib.dll, with the executable file being "nuPerfScan.exe" which is located in "C:\Program Files\Norton Security\Engine32\22.22.4.11". The file is signed by "NortonLifeLock Inc" DigiCert SHA2 Assured ID Code Signing CA, and appears to be a legitimate Norton Process. The details tab of this file show the product name as " iolo Toolkit".
Are Iolo and Norton the same? Is Norton using an Iolo product in their software? Why does it keep calling to download.iolo.net every 6 minutes? Why is this only happening on one of my two Windows 10 PC's, and not the other? The second PC is sitting right next to this one, on the same ethernet connection, also Windows 10 with Norton 360, and it does not make this inquiry to iolo.com. There are NO iolo products on my PC's. How do I disable this, as I have no interest in downloading anything from iolo.net.
I am running Norton 360 for Windows 10 and just upgraded to version 22.22.4.11. from 22.22.3.9, but the problem persists. I rebooted after the upgrade, but it did not help either. Download.iolo.com still keeps getting contacted by Norton every 6 minutes.
Thank you SoulAsylum! Your solution has worked for the last 3 hours. It's 11:47pm and the last call to the website was at 8:47pm. Not a single hit to "download.iolo.net". Very much appreciated. So glad to finally figure out what was causing this.
Over the last 30 days, there were 3,472 requests to this website! Thank you for helping me stop it! YAY
Hello RJ-FL. Although I don't see the lolo traffic on my machines that you are describing the files "nuPerfScan.exe" and "tulH.exe" have been in recent times, a source of unwanted scanning as well as items showing up in history, where those features aren't installed within a Norton product. After each Norton product update I rename the two files "nuPerfScan.exe" and "tulH.exe" as shown in the screenshot. I have to temp disable tamper protection to do so. After which I reboot my machine. The file "ToolLib.dll" which you have also shown as being present is also present on all my systems. I believe renaming these two files may resolve your issue. It has resolved system performance issues which were present before renaming them on my systems, I ALSO no longer get the entries in Norton history for Registry Cleanup, as an example any longer.
This is an example where the tulH.exe file was initiating the registry cleanup. This is nothing more than an attempt to sell-up users for added features they don't necessarily need.
Norton products integrate services from trusted partners for some functionality and these are tested extensively along with the rest of the product. In this case it looks like that network request may be happening more frequently than expected on one of your machines. We appreciate your patience as we investigate the issue. Thanks for reporting this and for your trust in Norton!
Thank you for any insight you may offer.
Over the last 30 days, there were 3,472 requests to this website! Thank you for helping me stop it! YAY
