High CPU usage occurs on a Windows computer with Altiris Software Virtualization Agent after installing Worry-Free Business Security (WFBS) or OfficeScan

Support
Solution ID Last Updated
1053586 Date : 2012/02/10 Time:10:42 AM , (PST)


Product/Version Platform
OfficeScan - 10.0, 10.5, 8.0;Worry-Free Business Security Standard/Advanced - 5.1, Worry-Free Business Security Standard/Advanced - 6.0, Worry-Free Business Security Standard/Advanced - 7.0;
Windows - 2000 Advanced Server, 2000 Professional, 2000 Server, 2003 Enterprise, 2003 Standard Server Edition, 2008 Enterprise, 2008 Essential Business Server, 2008 Small Business Server, 2008 Standard Server Edition, 7 32-bit, 7 64-bit, Vista 32-bit, Vista 64-bit, XP Professional

Problem Description

The issue occurs on a Windows computer that has the agent Symantec Workspace Virtualization (SWV), also formerly named as Symantec Altiris Software Virtualization. The system performance becomes sluggish and the CPU usage gradually grows to 100%.

 

If the WFBS / OfficeScan client is unloaded, the issue disappears. After restarting the client services, the issue reappears.

Solution

Trend Micro is currently researching the complete solution for this issue. As a workaround, please do the following:

 

1.

Make sure that you have the latest scan engine version:

 

 

 

Note: The latest OfficeScan and WFBS scan engine can be found in the Trend Micro Update Center.

 

 

 

•

WFBS server

 

 

 

 

 

a.

Log on to the WFBS console.

 

 

 

 

 

 

b.

Go to Updates > Manual.

 

 

 

 

 

 

c.

Expand Antivirus under Components section by clicking the plus sign (+) before it.

 

 

 

 

 

 

d.

Compare the value of "Virus scan engine 32-bit/64-bit" to the latest version.

 

 

 

 

 

 

 

If the scan engine version is not updated, click Update Now.

 

 

 

 

•

OfficeScan Server

 

 

 

 

 

a.

Log on to the WFBS console.

 

 

 

 

 

 

b.

Go to Updates > Server > Manual Update.

 

 

 

 

 

 

c.

Under the Components to Update section, compare the value of "Virus Scan Engine 32-bit/64/bit" to the latest scan engine.

 

 

 

 

 

 

 

If the scan engine version is not updated, click Update Now.

 

 

 

 

 

•

Affected Client/Server Security Agent (CSA) or OfficeScan client

 

 

 

 

 

a.

Right-click the CSA/OfficeScan client icon on the system tray and select Component Versions.

 

 

 

 

 

 

b.

Compare the value of "Virus Scan Engine" to the latest version.

 

 

 

 

 

 

 

If the scan engine version is not updated, right-click the CSA/OfficeScan client icon on the system tray and select Update.

 

 

 

2.

Open the Registry Editor (regedit.exe)

 

 

 

Important: Always create a backup before modifying the registry.  Incorrect registry changes may cause serious issues.  Should this occur, restore it by referring to the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

 

 

3.

Go to the HKLM\SYSTEM\CurrentControlSet\Services\TmFilter\Parameters registry hive.

 

 

4.

Add the DWORD value "DisableCtProcCheck" and set its value to "1".

 

 

5.

Restart Trend Micro Scan Engine services or reboot the system for the changes to take effect.

 


Rate this Solution
Did this article help you?

Please provide your comments to help us improve this solution.

 
  *This form is an automated system. General questions, technical, sales and product-related issues submitted through this form will not be answered.
 
 

Connect with us on