VirusScan 8.5.0i chewing up 100%, scanning without schedule

[humbletech99]

I have rolled out McAfee VirusScan Enterprise 8.5.0i with ProtectionPilot but it is comsuming 100% cpu on some workstations running XP Pro Sp2.

It seems to kick in at around 5pm daily which is coincidentally after a scheduled update. But protection polit shows that updates are supposed to be hourly and there doesn't seem to be a way of changing the 5pm update schdule remotely via policy.

I don't understand why the update is triggering a full scan.

Another user is complaining that it chews up his cpu several times a day which would seem to follow the hourly update schedule that is define on the protection pilot server.

1. Why is McAfee chewing 100% cpu?
2. Why is McAfee scanning when there is no scheduled full scan
3. Why is the protection pilot and the local update schedule different?

 

[g8orade]

Have you looked at the lsass.exe being in a loop. Disable buffer overflow on one of the affected machines and see if that stops the utilization. If so, then narrow your scope down to a process that is running.
G8orade

 

[humbletech99]

I seemed to be able to solve this by applying a hotfix and also disabling the local schedule.

 

[pytchley]

Here is the correct way to ajust utilisation.
Right click on the shield.
Left click 'Virus scan console.
Right click 'Full Scan'
Left click 'Properties'
Left click 'Advanced' Tab
Crank the 'Sytem Utilisation' from 100% to say 10%
OK the setting.

Thats it!

 

[humbletech99]

well, the utilization thing was apparently a bug as well, but thanks for the advice, I'll look at that.

thanks again.

 

[deadbeef]

If you have an enterprise inventory software (SMS, Zenworks for workstation, etc) and planned a scan of the PC virusscan can take a lot of I/O and cpu since his work is to scan every files that is read/write.

Ben

 

[humbletech99]

you don't say...

 

[kmkeshav]

https://knowledge.mcafee.com/Suppor...Public&dialogID=17086793&stateId=1 0 17072780

Hope this helps.

-Keshav