Jump to content
supportkochi

SVCHOST 100% utilization [In Progress]

Recommended Posts

HEllo,

 

 

We ate having Security Center 10.1.249. And the netagent 10.1.249, End point is 10.2.1.23.

 

Last day we try to install the windows update in Few systems for that we done changes in the

 

Netagent policy ie we Activate the WSUS service.

Don the Perform Windows Update synchronization.

And create the windows update task for few systems.

 

We install the updates. Next day Morning around 80% System is having 100% Cpu utilization. SVCHOST.exe is taking this much resource. Inthe same environment Symantec is there. Those systems are working fine. when we uninstall the netagent It is working fine.

 

Then we turn off the WSUS service in the netagent and we turn of the the windows update on that particular System and install the netagent The system is working fine.

 

Then we try to turn on the WSUS service on that issued System. the issue will appear again after 15 min. This issue is appearing only windows XP SP3

machines.

 

So kindly suggest a solution AS SOON AS POSSIBLE.

Share this post


Link to post
HEllo,

We ate having Security Center 10.1.249. And the netagent 10.1.249, End point is 10.2.1.23.

 

Last day we try to install the windows update in Few systems for that we done changes in the

 

Netagent policy ie we Activate the WSUS service.

Don the Perform Windows Update synchronization.

And create the windows update task for few systems.

 

We install the updates. Next day Morning around 80% System is having 100% Cpu utilization. SVCHOST.exe is taking this much resource. Inthe same environment Symantec is there. Those systems are working fine. when we uninstall the netagent It is working fine.

 

Then we turn off the WSUS service in the netagent and we turn of the the windows update on that particular System and install the netagent The system is working fine.

 

Then we try to turn on the WSUS service on that issued System. the issue will appear again after 15 min. This issue is appearing only windows XP SP3

machines.

 

So kindly suggest a solution AS SOON AS POSSIBLE.

 

 

Hi,

 

Please provide us GSI report from your machine in a PM to this account.

 

Thank You!

Share this post


Link to post
HEllo,

We ate having Security Center 10.1.249. And the netagent 10.1.249, End point is 10.2.1.23.

 

Last day we try to install the windows update in Few systems for that we done changes in the

 

Netagent policy ie we Activate the WSUS service.

Don the Perform Windows Update synchronization.

And create the windows update task for few systems.

 

We install the updates. Next day Morning around 80% System is having 100% Cpu utilization. SVCHOST.exe is taking this much resource. Inthe same environment Symantec is there. Those systems are working fine. when we uninstall the netagent It is working fine.

 

Then we turn off the WSUS service in the netagent and we turn of the the windows update on that particular System and install the netagent The system is working fine.

 

Then we try to turn on the WSUS service on that issued System. the issue will appear again after 15 min. This issue is appearing only windows XP SP3

machines.

 

So kindly suggest a solution AS SOON AS POSSIBLE.

 

 

Hello,

 

Go to manage computer group

Click on Task tab

find vulnerabilities and application updates task

 

Check if this task is running or scheduled

Delete this task and observe the system performance.

 

you can check this in limited system, create a test group, move 2 or 3 problematic system and let us know the result.

Share this post


Link to post
Hello,

 

Go to manage computer group

Click on Task tab

find vulnerabilities and application updates task

 

Check if this task is running or scheduled

Delete this task and observe the system performance.

 

you can check this in limited system, create a test group, move 2 or 3 problematic system and let us know the result.

 

Hello,

 

I already removed that task but the same thing is happening. Those system is already in different group.

 

Share this post


Link to post
Hello,

I cant upload hear Please provide any FTP.

 

According to the GSI report provided you have got the following driver running as potentially incompatible:

 

Drivers started in ...

 

ZenworksWindowsService.exe [1]

=> Filename C:\Program Files\Novell\ZENworks\bin\FirewallHandler.dll - ZENworks Adaptive Agent

 

Please try to remove it and check again.

Share this post


Link to post
According to the GSI report provided you have got the following driver running as potentially incompatible:

 

Drivers started in ...

 

ZenworksWindowsService.exe [1]

=> Filename C:\Program Files\Novell\ZENworks\bin\FirewallHandler.dll - ZENworks Adaptive Agent

 

Please try to remove it and check again.

 

Hello Evgeny Medvedev,

 

This is a dll file from Novell Software. So we cant remove that S/w. So we put that dll as trusted one.

 

WHAT I NEED IS TO WHETHER THE 100% UTILIZATION ACURS DUE TO ANY BUG IN NETAGENT. Or we have to do any changes in the netagent policy. Please provide a solution as soon as possible Because now we cant do the windows update from the security center

Edited by Kunchu

Share this post


Link to post
Hi,

 

Please clarify do you use KSC as WSUS?

 

Hello,

 

We are using KCS as WSUS server. For that when we change the network agent policy ie we activate the WSUS server on it at that time this issue occurs.

Share this post


Link to post

In order to solve the issue asap please create a request at KL Support.

 

Please attach GSI and kaspersky, system and application event logs to the request.

 

Thank you for cooperation.

Share this post


Link to post

With permission of Nikolay:

@Kunchu: Please check in Protection Policy if "Vulnerability Monitor" is enabled. If yes, please disable it, apply changes, force synchronization and check your computers.

And create a local task to Find Vulnerabilities in day(s) and hour(s) that can't impact performance in computers.

Edited by victorm

Share this post


Link to post
Hello,

Please find the attachment.

 

This machine has IE7 installed.

 

I think this is a known Microsoft issue with the Windows Update Agent on XP and IE6/IE7. Deploying IE8 should make the problem go away. If IE7 is required, then there is no solution at the moment.

 

http://marc.info/?l=patchmanagement&m=138696900324972

http://www.google.com/search?q=XP+%22windo...date%22+SVCHOST

 

Share this post


Link to post

Hi Kunchu,

 

In order to solve the issue, please provide us with the following information:

1. Please provide us with AVZ log (see my signature)

2. Please provide us with NAgent dumps.

3. Have you tried to disable KES self-defence?

4. Is there any info about the process that uses svchost.exe? It could be done with process monitor - http://technet.microsoft.com/en-us/sysinte...s/bb896645.aspx

 

Thank you for cooperation.

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.