I've had horrendous problems with LuCallbackProxy.exe last couple of weeks.

I e-mailed Symantec (Norton) for advice and help. They just been e-mailing back that they will get back to me. Yeah, right.

I gather that the file is supposed to be Norton’s process residing as a hidden file in C:\Program Files\Symantec\LiveUpdate. It has a brethren LUCALLBACKPROXY.EXE-29128DB6.pf in C\WINDOWS\prefetch. It’s supposedly used by the Norton suite of programs to update virus and software definitions.

I have an XP SP2 machine hooked up to the Internet by 3 Megabit DSL modem. Whenever I turn the modem on, in short time the LuCallbackProxy.exe spawns itself into 3 to 5 copies and eats up 100% of my CPU resources. This may go on for a few to tens of minutes. Then the processes disappear and I can do work again since CPU usage drops down to the normal baseline of 5 to 15%. But 5 to 30 minutes later we are back to square one. Deleting the processes manually using the Windows Task Explorer works, but only temporarily.

I wanted to know if I am dealing with the real Norton’s LouCallbackProxy.exe with perhaps a back door exploited by a hacker or with rogue software pretending to be LouCallbackProxy.exe and hiding somewhere inaccessible in the bowels of the Windows directory. So I temporarily renamed the files and waited to see what would happen. Nothing, not for a long while. So the back door is plausible. Or at least the hacker couldn’t find the files he was looking for.

But in a day or so a new problem popped up. svchost.exe popped up and started to devour 100% of my CPU time.

Any ideas on how to diagnose this problem further?

There has to be a hole in my security, though both the Microsoft Firewall and the Norton Internet Security suite report everything just honky dory.

Thanks for any ideas.

"HerzogValdemar" <herzogvaldemar******.com> wrote in message
news:HerzogValdemar.2q4lq5@no-mx.tabletquestions.com...
>
> I've had horrendous problems with LuCallbackProxy.exe last couple of
> weeks.
>
> I e-mailed Symantec (Norton) for advice and help. They just been
> e-mailing back that they will get back to me. Yeah, right.
>
> I gather that the file is _supposed_ to be Norton’s process residing as
> a hidden file in C:\Program Files\Symantec\LiveUpdate. It has a brethren
> LUCALLBACKPROXY.EXE-29128DB6.pf in C\WINDOWS\prefetch. It’s supposedly
> used by the Norton suite of programs to update virus and software
> definitions.
>
> I have an XP SP2 machine hooked up to the Internet by 3 Megabit DSL
> modem. Whenever I turn the modem on, in short time the
> LuCallbackProxy.exe spawns itself into 3 to 5 copies and eats up 100%
> of my CPU resources. This may go on for a few to tens of minutes. Then
> the processes disappear and I can do work again since CPU usage drops
> down to the normal baseline of 5 to 15%. But 5 to 30 minutes later we
> are back to square one. Deleting the processes manually using the
> Windows Task Explorer works, but only temporarily.
>
> I wanted to know if I am dealing with the real Norton’s
> LouCallbackProxy.exe with perhaps a back door exploited by a hacker or
> with rogue software pretending to be LouCallbackProxy.exe and hiding
> somewhere inaccessible in the bowels of the Windows directory. So I
> temporarily renamed the files and waited to see what would happen.
> Nothing, not for a long while. So the back door is plausible. Or at
> least the hacker couldn’t find the files he was looking for.
>
> But in a day or so a new problem popped up. svchost.exe popped up and
> started to devour 100% of my CPU time.
>
> Any ideas on how to diagnose this problem further?
>
> There has to be a hole in my security, though both the Microsoft
> Firewall and the Norton Internet Security suite report everything just
> honky dory.
>
> Thanks for any ideas.
>
>
> --
> HerzogValdemar
If you have Live Update set to run automatically, in NIS "options" disable
it and run Live Update manually once per week or more if you wish. Then it
may not want to run by itself so much. Have you tried reinstalling Norton?
If you have NIS enabled you don't need Windows XP firewall running also.
Above all, go to the Symantec help site for more information. Good luck. You
could have mentioned which NIS vintage year you have installed.

"HerzogValdemar" wrote
> I've had horrendous problems with LuCallbackProxy.exe last couple of
> weeks.
>
> I e-mailed Symantec (Norton) for advice and help. They just been
> e-mailing back that they will get back to me. Yeah, right.
>
> I gather that the file is _supposed_ to be Norton's process residing as
> a hidden file in C:\Program Files\Symantec\LiveUpdate. It has a brethren
> LUCALLBACKPROXY.EXE-29128DB6.pf in C\WINDOWS\prefetch. It's supposedly
> used by the Norton suite of programs to update virus and software
> definitions.
>
> I have an XP SP2 machine hooked up to the Internet by 3 Megabit DSL
> modem. Whenever I turn the modem on, in short time the
> LuCallbackProxy.exe spawns itself into 3 to 5 copies and eats up 100%
> of my CPU resources. This may go on for a few to tens of minutes. Then
> the processes disappear and I can do work again since CPU usage drops
> down to the normal baseline of 5 to 15%. But 5 to 30 minutes later we
> are back to square one. Deleting the processes manually using the
> Windows Task Explorer works, but only temporarily.
>
> I wanted to know if I am dealing with the real Norton's
> LouCallbackProxy.exe with perhaps a back door exploited by a hacker or
> with rogue software pretending to be LouCallbackProxy.exe and hiding
> somewhere inaccessible in the bowels of the Windows directory. So I
> temporarily renamed the files and waited to see what would happen.
> Nothing, not for a long while. So the back door is plausible. Or at
> least the hacker couldn't find the files he was looking for.
>
> But in a day or so a new problem popped up. svchost.exe popped up and
> started to devour 100% of my CPU time.
>
> Any ideas on how to diagnose this problem further?
>
> There has to be a hole in my security, though both the Microsoft
> Firewall and the Norton Internet Security suite report everything just
> honky dory.

There are been quite a few posts in here recently about svchost.exe taking
100% of the CPU. In many cases this is due to an issue with Automatic
Updates for which there is now a fix released by MS. It could also be due
to malware. Your problem is compounded by the problems with the Norton
software.

I suggest two things. First get rid of NIS and don't use any of the Norton
home security products. They often times become problematic, and even when
running well they are resource heavy. There are other, more reliable, less
resource intensive alternatives, that are either lower cost or free. If you
want specific info on what is available post back.

For the svchost issue do a search of the posts in this newsgroup for that
topic. Google Groups Advanced Search is a good tool for this purpose. This
newsgroup is microsoft.public.windowsxp.general

http://groups.google.com/advanced_se...oe=UTF-8&hl=en



--
Rock [MS-MVP User/Shell]

"In many cases this is due to an issue with Automatic Updates for
which there is now a fix released by MS."

Would you be so kind as to post that link? Thanks!

<Pam.Ringo******.com> wrote
> "In many cases this is due to an issue with Automatic Updates for
> which there is now a fix released by MS."
>
> Would you be so kind as to post that link? Thanks!

Here is a link that discusses it.
http://www.bleepingcomputer.com/blog...showentry=1071

FYI you could have got the info by searching the newsgroup for recent posts
about svchost.exe. Google Groups Advanced Search is a good tool for
searching for similar posts.

http://groups.google.com/advanced_se...oe=UTF-8&hl=en

You can search in particular newsgroups or families of newsgroups, and
filter by author, subject, keyword and date.

--
Rock [MS-MVP User/Shell]

you are such a jerk.

just cannot getting in that virtual spanking.

you cannot understand that there are people posting here who cannot spell COMPUTER, much less be experts in using one.



mikeyhsd@comcast.net



"Rock" <Rock@nospam.net> wrote in message news:uesjlw4kHHA.4872@TK2MSFTNGP03.phx.gbl...
<Pam.Ringo******.com> wrote
> "In many cases this is due to an issue with Automatic Updates for
> which there is now a fix released by MS."
>
> Would you be so kind as to post that link? Thanks!

Here is a link that discusses it.
http://www.bleepingcomputer.com/blog...showentry=1071

FYI you could have got the info by searching the newsgroup for recent posts
about svchost.exe. Google Groups Advanced Search is a good tool for
searching for similar posts.

http://groups.google.com/advanced_se...oe=UTF-8&hl=en

You can search in particular newsgroups or families of newsgroups, and
filter by author, subject, keyword and date.

--
Rock [MS-MVP User/Shell]

I am having the same problems ever since I purchased and loaded Norton 360. Has anyone responded to you with any answers?

Any help would be appreciated.

"Kerneyt" <kerneyt@aol.com> wrote in message
news:Kerneyt.2rxg7d@no-mx.tabletquestions.com...
>
> I am having the same problems ever since I purchased and loaded Norton
> 360. Has anyone responded to you with any answers?
>
> Any help would be appreciated.
>
>
> --
> Kerneyt
Try disabling Symantec LiveUpdate (3.0) in the control panel applet named
"Symantec LiveUpdate". Check in the Event Viewer for messages pertaining to
LU.