Event viewer shows Norton crashes then my network cuts out in a weird manner. Only my Desktop loses connection and nothing else crashes. Any ongoing connections like calls/meetings still work for 1 - 3 mins oddly. This has happpened since Sept 23rd almost daily now.
I’ve tried flushing DNS, disabling smart firewall, disabling Windows firewall, Windows updates, repairing the Norton within the program’s settings, restarting Norton Windows Services, and various programs/browsers to see if anything works. The only fix is rebooting my PC all together (I even replaced my router just in case)
Error
“The Norton Antivirus service terminated unexpectedly. It has done this 3 time(s). The following corrective action will be taken in 5000 milliseconds: Run the configured recovery program.”
After this error I do see some DNS warnings which was why I tried flushing
What “specifically” does the DNS warning say? Do you have a screenshot to share? Screenshot of your event viewer specific to this issue would also be great to review. Is your VPN active when this happens and what is logged in your Norton history that is related?
Edited: What is your Windows version and build?
What is your Norton version and build?
Tragically my idiot self clicked Clear Log instead of Filter Current Log so I’ll need to wait for another crash. No VPN actively in use (2 running in background in case I need them and always have been for years)
Norton Security History just shows allowed ‘Rule Windows Networing In Allowed UDP(17)’ up until the crash.
My suggestions are disable OneDrive if you are using it. And from an Admin prompt run “sfc/ scanow” to check for file corruption. When done, at the same Admin prompt run “DISM.exe /Online /Cleanup-image /StartComponentCleanup” then “DISM.exe /Online /Cleanup-Image /Restorehealth”. Lets see if that corrects anything for you.
Also check your Windows hosts file for entries that shouldn’t be there.
Disabled OneDrive for now as I need it for moving between devices. Ran all 3 commands with SFC mentioning some corruption. Had the network failure twice this morning with the DNS Client Event warning
“Name resolution for the name t-ring-fdv2.msedge .net timed out after none of the configured DNS servers responded. Client PID 16272.”
Host files under C Windows\System32\drivers\etc had nothing that wasn’t commented
Happened again this morning. Smart Firewall was disabled at the time and Security history doesn’t have any smoking guns. Event viewer same old Norton crashed right before it happened
NetBIOS over TCP/IP still disabled from previous change
I am noticing this only happens during weekdays during work. Weekend seems fine so I can assume a work program is causing this somehow, but Norton crashing is a significant sign and issue regardless
Was there ever a fix for this issue? I have been having the same issue. Only temporary fix is to reboot since Norton prevents you from ending the program. Restarting windows works until it happens again.
Norton support got on and force uninstalled all aspects of Norton then reinstalled. Issue was fine for about 2 weeks then happened again. Currently Norton is uninstalled for me.
I’ve been experiencing exactly the same behaviour for about 6 weeks (possibly longer). It’s on a brand new ARM64 Win11 laptop.
At first I thought it was just timing out. I read somewhere that using Win11 with a USB-C docking station would power timeout, but I’ve experienced this whilst using applications actively. The behaviour is very strange, but I believe I’ve narrowed it down to the Norton AV service crashing, recovering but somehow blocking DNS lookups. Nothing I’ve tried short of a reboot works.
Sequence appears to be:
Norton AV service crashes and auto-restarts (got from Event Viewer - Application log)
Windows Error reporting events in the logs for the Norton crash (Application log)
System event about the service terminating (System log)
Windows security audit lookups fails a few secs later (I believe a symptom but the first separate event log) (Security log)
Full DNS lookups fail shortly after that.
Ping v4 and v6 work (to intranet and internet addresses) e.g. 192.168.x.x and 8.8.8.8
NSLOOKUPs fail when using default dns or specifying 8.8.8.8
TRACERT to local intranet 192.168 addresses work but are quite delayed (5+ secs but instant when DNS working ok)
Disabling all Norton services (Firewall, Auto-Protect, VPN) has no effect
Switching from Ethernet to Wifi and back has no effect
Removing USB-C docking has no effect
Disabling IPv6 has no effect
DNS flushes and DHCP renews have no effect
All TCPIP connectivity seems to be working fine, just not the DNS lookup/resolving.
No clues anything is wrong when comparing IPCONFIG outputs
Bluetooth connectivity is fine (obviously not reliant on dns)
The Security audit event log (which were a few secs after the AV crash) indicated disk issues. I did a thorough disk scan anyway, but that was clean. No event logs indicating any hardware issues.
Norton software is up to date. Scans are all cleans.
Can’t find any further logging info. The Norton logs is very summarised and nothing indicating anything is wrong.
I’ve been using the same Norton products for years and never seen this behaviour. First time using ARM and Win11. Previously laptops can’t upgrade past Win10.
Happy to help troubleshoot this and I’m reluctant to switch AV software, but like our friend above, it’s not sustainable.
