Norton shutting itself down

I will submit logs to assist. Can you message me with instructions like you have done for others.

Hey, Gayathri. Here is the requested log file. Hope it helps.

I thought maybe reinstalling Visual C++ with the 2022 version included would have worked. No dice.

Hi,

We are sorry about the issue you're facing. We are investigating this issue to find the root cause. This is a priority for us. Once we have a fix ready, I'll update this thread. 

Meanwhile, if you are willing to help us find the root cause (log collection, remote session), we'd really appreciate it. Please let us know if we can reach out to you.

-Gayathri 

I'm not very tech savvy, but still was wondering some things. Are the log entries in Norton's history just a mirror of relevant entries from windows event viewer logging?

 

In any case when these crashes happen there are always 2 entries in the event viewer and 2 entries in Norton's history. They are 2 seconds apart.

 

7/27/2021 11:56:19 AM

Faulting application name: NortonSecurity.exe, version: 17.2.3.57, time stamp: 0x6066105d
Faulting module name: ntdll.dll, version: 10.0.19041.1110, time stamp: 0xe7a22463
Exception code: 0xc0000374
Fault offset: 0x00000000000ff259
Faulting process id: 0xd84
Faulting application start time: 0x01d782faec64a536
Faulting application path: C:\Program Files\Norton Security\Engine\22.21.6.51\NortonSecurity.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 5d57a145-0413-4bdf-98ce-5a116a5f46f3
Faulting package full name:
Faulting package-relative application ID:

 

7/27/2021 11:56:21 AM

The Norton Security service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 120000 milliseconds: Restart the service.

 

Norton history:

7/27/2021 11:56:19 AM

Unauthorized access blocked.

Actor: Windows\system32\werfault.exe

Target: Program Files\Norton Security\Engine\22.21.6.51\NortonSecurity.exe

*Access Process Data*

 

7/27/2021 11:56:21 AM

Unauthorized access blocked.

Actor: Windows\system32\werfault.exe

Target: Program Files\Norton Security\Engine\22.21.6.51\NortonSecurity.exe

*Access Thread Data*

 

 

Notice how it goes from trying to access process data and then thread data.

 

 

 

 

Any chances anyone has standard Intel Graphics with the Windows driver vice the Intel drivers installed? KB4023057 tinkers with the registry, service stacking for Windows Update. 

KB5004237 does alot of things regarding Windows security related:

  • Security updates to Windows Apps, Windows Management, Windows Fundamentals, Windows Authentication, Windows User Account Control (UAC), Operating System Security, Windows Virtualization, Windows Linux, the Windows Kernel, the Microsoft Scripting Engine, the Windows HTML Platforms, the Windows MSHTML Platform, and Windows Graphics.

Related? 

 

 

It seems like it relaunches right after these crashes, but I still worry how secure my system can be with Norton acting this way.

 

For me this is a new install so maybe these updates aren't new enough to be suspects, but just in case, the install dates on my particular machine do correspond with the start of these crashes.

 

KB5004237

KB4023057

I'm seeing the same thing across my notebook and desktop.  Norton just seems to crash in the background without any warning or error messages.  It doesn't seem to be related to anything I may be doing.  I just restart it when I notice the icon missing from the systray.  It does seem to be related to a recent patch as it seems to have surfaced in the last week or so.  Very frustrating...

basically, I checked on my work computer(which got eset endpoint security). It got all of the apps I have on this computer, and it didn't have any ntdll.dll errors. On my mothers' computer (which also have norton on it), is experiencing the same ntdll.dll error. So, I know that there is definitely something wrong with norton. 

I have run it multiple times and it hasn't found any issues either.

 

 

Maybe we should all start listing settings or software we use that are common and could be variables.

Skype. Steam. Steel Series Engine.

Settings I always go for a minimalistic aesthetic so no live tiles no search or buttons or anything on taskbar accept a few icons that I place and a few items in the notification area that I want there, it is set to display all and I disbale things individually and intentionally. Norton is something I want to see there obviously, same with Skype, Steam and my Steel Series software. No action center but, nic, sound and the quick peak button are there. I have used SpyBot anti beacon software to disable  telemetry.

latest error

 

also something interesting I found. Norton is having problems with ntdll.dll from 2014 to 2021 it has been 7 years..

https://community.norton.com/en/forums/cant-open-norton-360-ntdlldll

Faulting application name: NortonSecurity.exe, version: 17.2.3.57, time stamp: 0x6066105d
Faulting module name: ntdll.dll, version: 10.0.19041.1110, time stamp: 0xe7a22463
Exception code: 0xc0000374
Fault offset: 0x00000000000ff259
Faulting process id: 0x4b94
Faulting application start time: 0x01d78269241a6200
Faulting application path: C:\Program Files\Norton Security\Engine\22.21.6.51\NortonSecurity.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: b8c4678b-919f-4ea8-9660-57f7d6728899
Faulting package full name: 
Faulting package-relative application ID: 
 

When I run 'Get Support' it reports no issues found!

I have found that logging out of Windows and logging back in is all it takes to restart Norton if launching Norton from the start menu doesn't work, but sometimes a restart is a good idea.  On a few occasions I have run the Get Support function from the tray icon context menu and both times it said it did an Installation Repair, but what does that repair?  Who knows, but it didn't help fix the crashing issue that's for sure.

True, I've noticed this. Sometimes it does restart, sometimes it doesn't, and when it doesn't, I have to restart my computer to get it back up.

It could be that some people have no idea the program is crashing because when it's happened to me a few times, the program restarts and is back in the system tray. Other times it doesn't restart and is absent from the system tray.

peter11:

 so many people have this problem, what does that mean... It is all my fault that norton's app have a problem? This is so disappointing and not responsible. 

But there are also so many of us not seeing this issue. So the task Norton has is to try to determine what you and the others seeing the issue have on your systems that might be causing the issue, that I and others do not have.

That is why logs are essential.

Here is my most recent crash log:

Faulting application name: NortonSecurity.exe, version: 17.2.3.57, time stamp: 0x6066105d
Faulting module name: ntdll.dll, version: 10.0.19041.1110, time stamp: 0xe7a22463
Exception code: 0xc0000374
Fault offset: 0x00000000000ff259
Faulting process id: 0x34a4
Faulting application start time: 0x01d782e10d9916d4
Faulting application path: C:\Program Files\Norton Security\Engine\22.21.6.51\NortonSecurity.exe
Faulting module path: C:\WINDOWS\SYSTEM32\ntdll.dll
Report Id: 474d85f1-af74-4004-a00f-540d2888b263
Faulting package full name: 
Faulting package-relative application ID: 

 

These are getting so bad that I can't restart Norton after the app crash. I have to restart my computer to get the program up and running again.

@Pcloverxp Your are running a BETA, Windows 11 Insider Preview build 22000.100 which is not supported by Norton in any fashion. Norton may function on BETA releases without any guarantee it will not produce issues. Windows 11, when it becomes RTM released to public consumption Norton should provide support information accordingly. 

@AJR78 On your end was a reference to the werfault logging you are seeing on your end ( computer), is the same as other posters are seeing. Individual users milage may vary due to different hardware and software configurations as well. I have 1 machine out of 8 showing the issues we are all seeing in this thread. None of the 8 have the same hardware nor software configurations. Hope that clears that up a bit. wink

SA

Ive had this as well, on some days, it would happen half a dozen times, however interestingly, on my laptop and desktop, which I installed the Windows 11 Insider Preview build 22000.100, the number of instances of Norton crashing had dropped dramatically and I could go a few days without an incident, in fact the last recorded Norton crash event in the Event Viewer on my desktop was around 5am on July 25th, just a few days ago.  I know that having Norton installed on a Windows Insider Preview build is unsupported, however, for ME anyway, Norton seems to be a bit more stable on the current build of Windows 11 than it has been lately on the current supported Windows 10 21H1 19043.1110. 

This is just an observation from my experience and not as a workaround to the problem.  Just hope it gets fixed soon though.

 so many people have this problem, what does that mean... It is all my fault that norton's app have a problem? This is so disappointing and not responsible.