Norton causing BSOD

Archive
61
Bob White:

Our 2 Servers have had no problems - only the PCs with Norton 360. The Servers have the Symantec End Point protection. Any feedback on the possibility of putting that on your PCs?

Hi Bob White:

You can find information on Symantec's business products at http://buy.symantec.com/estore/clp/small-business-security-antivirus.  I`m much more familiar with the Norton line of products for home consumers (NAV/NIS/N360/NS), but my understanding is that the cloud-managed version of Symantec Endpoint Protection Small Business Edition (SEP/SBE, for < 250 employees) started using NIS v22 as the base product on the client computers in January 2016 - see kahml`s review at Symantec Endpoint Protection Small Business Edition Adds Consumer Features That Don’t Serve the Needs of Small Businesses.  I`m not sure what modifications, if any, have been made to SEP/SBE since that review was written.

The more interesting thread might be BTI HD's Vulnerability- Google Zero - SEB Users: YOU ARE STILL AT RISK!! in the SEP/SBE forum which includes the following quote from Symantec:

"We are working on speeding up the delivery of the new SEP SBE (cloud) agents as much as possible but we need to make sure they are properly tested and don’t create quality problems or further risks. We expect to release the new SEP SBE (cloud) agent for Servers in early July and the agent for Workstations in mid-late July...

...Customers can also reduce risk of attacks on these or other vulnerabilities by training users to avoid opening attachments from unknown senders or clicking links in unsolicited or suspicious emails." 

Someone from Symantec would have to confirm, but that sounds to me like the v22.7.0.76 update to patch the vulnerabilities listed in SYM16-010 was (or perhaps still is?) delayed for the SEP/SBE workstations while Symantec works on a fix for the BSODs and other bugs listed <here> that were introduced by this update.
-----------
32-bit Vista Home Premium SP2 * Firefox v47.0.1 * NIS v22.7.0.76 * MBAM Premium v2.2.1

62

Just got a blue screen on NAV that has today's Intrusion Prevention Driver 15.1.2.19 update, so that didn't help.

63

Our 2 Servers have had no problems - only the PCs with Norton 360. The Servers have the Symantec End Point protection. Any feedback on the possibility of putting that on your PCs?

64

I really like the Norton 360 for the utilities it has like the security safe, but should we be looking at McAfee? I've never used it - what's the opinions out there?

65

Which Norton product do you have on these machines?

66

Having the same issues on our network. Not only cant our Customer service reps not do their jobs. I cant do mine. I contacted Norton over chat and they escalated the issue to a supervisor and said they would call me back in 24-48 hours this time yesterday and I still have not received a call from them. I now have 8 workstations restating at random times. Our employees are loosing excel spreadsheets etc etc etc. Norton your fixing to loose 30+ plus subscriptions. I cant have all my workstations unprotected or on older versions.

67
Digital Throw Weight:
CAUTION HOWEVER:

HOWEVER: There was a response I received 3 days ago regarding another Symantec flaw that might be exposed when using v21.6-21.7. It is described here (SYM16-010):

https://www.symantec.com/security_response/securityupdates/detail.jsp?fi...

There is no "might" about it!  Anyone who follows Digital Throw Weight's suggestion and reverts to a pre-22.7.0.x version  WILL BE EXPOSED AND VULNERABLE!

 

68

Attn:  Norton Admin

We have this same issue on two computers.  Norton technicians were logged into both our computers all day on Tuesday, the 5th.  They were unable to fix the issue and were supposed to call back at 11:00 am on Wednesday, the 6th.  We have heard nothing.  We have a case number, which I can provide to you if you private message. I know they uploaded alot of information from our computers.  What are the next steps we can do in order to resolve this situation, other than uninstalling Norton products, which are on all of our computers in the office.  This is not an option we want to take, but can not work with continual blue screen interruptions.

69

BSOD sufferers,

I believe there's a solution I posted on another forum here:

http://answers.microsoft.com/en-us/windows/forum/windows_7-performance/blue-screen-error-bccode-df-windows-7/3fba59cc-8e9b-4a7d-8cdd-938a4e83e81a?auth=1

 

NOTE: Please read the "HOWEVER" clause at the bottom of my post here. There is a danger of exposure to another Symantec Vulnerability (READ BELOW at "HOWEVER").

 

Here is the fix procedure I used on 65 WIN 7 Pro machines. All the crashes have stopped, and we are back to work.

 

FIX PROCEDURE:

1) You have to roll back NIS to an earlier release that doesn't have this problem on Win 7. We just completed about 50 machines and it works (links below). We'll apply it to all our machines ASAP.

2) Use the Symantec NIS removal tool (link below) for the above, then reboot.

3) Install the last known "good" release of NIS that doesn't have this problem (21.6 -21.7) (link below)

4) IMPORTANT: DISABLE THE AUTOMATIC UPDATE and patch feature in NIS (or you will be right back with crashing machines and BSOD screens again).

 

RESOURCES:

Norton NIS removal tool:           https://www.symantec.com/nrt

Norton link to last known good release          https://www.norton.com/oldnis

Most recent NIS release (causes BSOD and crashes          https://www.norton.com/latestnis

 

 

CAUTION HOWEVER:

HOWEVER: There was a response I received 3 days ago regarding another Symantec flaw that might be exposed when using v21.6-21.7. It is described here (SYM16-010):

https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00

 

Right now, we are back to work with no BSOD screen or crashes of any kind since the procedure above was applied. However, because of the buffer overflow errors described in SYM16-010, we will have to migrate to another product soon if there is no definitive fix from SYMANTEC. At the very least, they might want to extend customer license lengths due to this disaster. What a mess!

I hope this helps people struggling with BSOD crashes.

 

-- Digital Throw Weight

 

70

I'm starting to think this is a Malware or Trojan which will lead us in the direction of turning off the protection so it can perform it's dirty tricks.

And the definition for it has not been discovered as of yet

71

Of course it will have to be supplemented in the meantime (with a trial right now), hopefully it's fixed before then so we don't have to purchase new AV. Just wanted to make sure disabling auto-protect actually fixes the problem.

Is disabling Smart-Firewall also a necessary step to prevent the BSODs? I don't want to give instructions, or "fix" it myself, and it ends up happening again since I left this one on. But at the same time, don't want to turn it off if I don't have to.

72

Sorry to say that we have tried all of the suggested solutions.  The only one that works is to remove and install and leave version 22.6 installed.  22.7.0.76 has had the BSOD with various options turned off.   Looks like it's time to migrate to another AV suite, Norton has done so well up until this point.

 

73

I believe disabling auto-protect and firewall will stop the BSOD but you'll be running naked on the net.  If you're okay with that give it a try.  There's no way I'm letting my bone-headed users run w/o active AV.

 

74

Is it safe to say disabling Auto-Protect, as previously mentioned, fixes the problem? Or must we do an entire uninstall to get rid of the problem for now?

75

This does not work for Norton Internet Security.  We tried turning off Sonar and Identity Safe and still have BSOD crashes.

76

We're using Norton 360. We turned off the Sonar and the Identity Protection under Advanced Settings and we haven't seen any new BSOD.

77

The same problem here since ver 22.7.0.76, please help!!! i have 20 pc

78
ldaleb:  I have been experiencing this issue with two laptops. Is there a forthcoming fix? I would like to purchase AV Software from another vendor if there is no ETA for permanent resolution.

FWIW ~ AV software from another vendor will have Trial.   Trial before you buy, trial if you're waiting for permanent solution.  

79

I have been experiencing this issue with two laptops. Is there a forthcoming fix? I would like to purchase AV Software from another vendor if there is no ETA for permanent resolution.

80

Yesterday afternoon I had yet another computer start experiencing the Norton BSOD.  This computer has been on version 22.7 since last week, but had been working fine, suddenly it too started getting the BSOD.  At this point, I can't limit the problem to just a handful of computers as it could effect more without warning.  This morning I've been switching all my users to another vendors AV suite.

This problem has through my July to-do list into a tailspin.