Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Buggrit on February 06, 2006, 09:34:57 PM
-
I have for the last three years been a supporter of Avast. I have recommended several friends, colleagues and even a few of my customers to use the pro version. Unfortunately I am now having big problems on my own system. ashserve.exe is more often than not running at 100% CPU usage.
I am running Win 2k sp4 fully patched on a Dell Optiplex PII 650 with 512 Mb RAM and have recently noticed a big drop in speed. My natural reaction was to assume Virus or Spyware issues however I have now scanned through all my files with Ad-Aware, MS Anti- Spyware, Spybot SD and Spyware doctor and I am confident I am clean. When I look in Task Manager I find the culprit appears to be Avast!. Ashserv.exe is mainly running at 100% and causing me big problems.
Is this normal?
I am aware my system is not the worlds fastest however this CPU load seems abnormally heavy and has not been a problem until recently.
What can you suggest.
Regards
JB
-
If ashServ.exe is using a lot of CPU, it must be scanning something. Open the on-access protection window (click on the avast! tray icon), select the Standard Shield provider and check the "Last scanned" item (when ashServ.exe is using the CPU, I mean). What does it show?
-
It seems to be split between stub. log (about 80% of the time and Twain001.mtx
No Idea what these are...
JB
-
I've just checked and this logfile seems to contain multiple repeats of the following entries...
data_src.cpp -- InitInstance
>>>>>>>>>>>> DS_Entry <<<<<<<<<<<<
DG_CONTROL / DAT_IDENTITY / MSG_GET
matds32.cpp -- control = NULL Identity Get - not creating interface
CControlMsg constructor
Got Identity. Calling IdentityMsg
Inside IdentityMsg. Msg = 1
CheckState state:3 range:3..7
pId->Version.Info = April 11, 2000
pId->Manufacturer = Hewlett-Packard Company
pId->ProductFamily = PrecisionScan LTX 1.1
pId->ProductName = HP PrecisionScan LTX 1.1
pId->Id = 0
data_src.cpp -- pSrc = NULL, Deleting control class
CControlMsg destructor
OLECleanup
OLE connection not running, no cleanup
data_src.cpp -- ExitInstance
I don't now if this will help?
JB
-
Update...
I cleared out the stub.log data & saved it to stub.log.old
I then created a blank Stub.log file in it's place.
This seems to have done the trick. but it would be nice to know what the issue first was af all?
JB
-
Some application is obviously heavily writing into the log file. avast!, having the sensitivity set to High (i.e. all created/modified files are scanned), has to rescan the file on every write - which make take a lot of time if the log file is big.
The solution (appart from limiting the logging somehow) would be to put the log file into the list of Standard Shield exclusions (so that it won't be scanned anymore).
-
***
From a Google search ...
http://www.google.com/search?q=HP+PrecisionScan+LTX+1.1&rls=com.microsoft:en-US&ie=UTF-8&oe=UTF-8&startIndex=&startPage=1
... it appears that your HP scanner OR a program for that scanner is what is creating that log and running up your computer's cpu usage.
Have you been scanning a lot lately? ???
***
-
Hello all.
Avast support technicians please note:
I have confirmed this behaviour until today on one PC (of 3 running avast home) now all 3 are exhibiting this behaviour.
I have watched avast scan file after file, but ashServ sits maxing out the cpu.
If I kill this process, then AshWeb kicks into high load. I kill this I get my PC back.
I too have been a long time user (2+ years), and am about to do a 180 and dump Avast if this problem doesn't go away really fast.
I have sent a email to support earlier today also no response as of yet, but I understand that response is typically slow.
I have seen setup.ovr (sp?) and one other exe that escapes me doing this also for NO APPARENT reason.
My guess is updates have destabilized this program.
-
Jeruvy, you didn't really supply much useful information.
If ashServ.exe is using the CPU, it means that it's scanning something. So, first you need to find out what is being scanned. You can do that, for example, by opening the On-access protection window (click on the avast! tray icon), select the particular resident providers (Standard Shield is the most likely guess) and watch the "Last scanned" item at the moment of the high CPU usage. You should be able to say what avast! is scanning.
Or, you can turn on the option "Show detailed info on performed action" in the resident providers.
-
Jeruvy, you didn't really supply much useful information.
If ashServ.exe is using the CPU, it means that it's scanning something. So, first you need to find out what is being scanned. You can do that, for example, by opening the On-access protection window (click on the avast! tray icon), select the particular resident providers (Standard Shield is the most likely guess) and watch the "Last scanned" item at the moment of the high CPU usage. You should be able to say what avast! is scanning.
Or, you can turn on the option "Show detailed info on performed action" in the resident providers.
Well that is the facts as I've seen them. I have not spent any further time troubleshooting this, nor do I plan to.
WHY after killing serv, does websrv kick in to 100%? your going to tell me that it was scanning a file on my system, and then once dead turned over to another exe to continue? Someone should explain this behaviour to me so I can understand it better.
As for watching what file it's scanning, I beleive I stated clearly above that I watched it scan several files, yet still cause saturation of cpu cycles.
The FACT that this has all happened recently and on two production AND a test box indicates your program no longer likes my builds. If that is a fact, then I will delete AVAST and move to Trend-Micro as they offer the best value for the number of boxes I have.
I was concerned over the number of updates I was receiving and unless someone can offer a better conclusion, my determination of the problem is the updates have destabilized on my systems. This is not a ONE PC deal, it is affecting ALL machines I install it on.
If you'd like better information then empower me to provide it. A debug version or some such tool may be of assistance, or you could improve your statement by clearly defining what information you seek.
-
WHY after killing serv, does websrv kick in to 100%? your going to tell me that it was scanning a file on my system, and then once dead turned over to another exe to continue? Someone should explain this behaviour to me so I can understand it better.
I have no idea. Killing ashServ.exe, however, is certainly not a correct method, so I don't really find it relevant. If you stopped Standard Shield provider from the user interface, for example (which should reduce the CPU usage, I guess) and ashWebSv.exe starts eating CPU - then it would be something worth investigating.
As for watching what file it's scanning, I beleive I stated clearly above that I watched it scan several files, yet still cause saturation of cpu cycles.
If you saw scanning setup.ovr, it means that an update (check) was started - but I don't believe this was a continuous process.
Recently, we've seen some programs performing heavy writing to their log files (one of them was some HP software I believe) - which causes Standard Shield to take a lot of CPU (when rescanning the log). Such a behavior, however, should be clearly visible in the "Last scanned" item.
Actually, it doesn't necessarily have to be the Standard Shield provider... maybe it could be some other as well. The only way to find out is turning them off temporarily to see if it helps.
-
***
Ouote from Jeruvy:
As for watching what file it's scanning, I beleive I stated clearly above that I watched it scan several files, yet still ...
Yes, but what are the names or extensions of some of those files? This info could be an excellent clue in what is causing the problem. These kinds of problems require more specfic info than the general info you have given so far. ::)
No one here can help solve the problem if you are not willing to have it solved. ???
***
-
The problem occurred on my PC also. I investigated the problem and it appeared as if ashServ.exe was periodically taking high percentages of CPU.
Then I started Process Explorer (http://www.sysinternals.com/Utilities/ProcessExplorer.html). It has two special processes it shows, one of which is hardware interrupts. And much to my surprise, it was not ashServ.exe that was the culprit: it was hardware interrupts!! I killed the ashxxx processes and the hardware interrupt bursts stopped.
Just to complete this: ashServ was not scanning any file when this occurred.
There is definitely something wrong with the last update. ???
-
Is the on-access scanner (or Standard Shield provider) sensitivity set to Normal or High. I recommend AGAINST setting it to High unless there's a specific reason for it, and you know what you are doing...
Thanks
Vlk
-
It's set to Normal
-
And is the avast icon spinning while the CPU load is high? I.e. is avast scanning something?
-
I already said that: it's scanning nothing.
-
So, again, the "Interrupts" process is showing high CPU usage, unless you kill ashServ.exe?
Is this reproducible? (I mean, does it happen all the time?)
-
Yes, that is what's happening.
I must add there is a P2P process running at that time (bitTorrrent), but the hardware interrupts vanish when ashServ is killed.
-
1. does stopping the P2P Shield in avast make any difference?
2. How much CPU is the "Interrupts" process taking, exactly?
-
I am now at the office, so I cannot test now.
CPU percentages go as high as 80%.
-
Some of the hardware interrupts seem to stem from the VRDB generation. I thought it would only update once in three weeks, but I have proof now that is does something constantly. All shields were paused, but the interrupts came in periodically together with the VRDB icon rotating in the tray.
The bulk of the interrupts stem from the combination bitComet and the Shields. When I terminate the shields the high CPU overhead goes away. The internet traffic should not generate that amount of interrupt handling.
The attachment shows the interrupts and BitComet twice. The top half of the picture shows the graphs for the interrupts and BitComet when the shields are terminated. The bottom half when the shields are up. The red graphs are the interrupts.
-
If the VRDB icon is spinning, then yes, it would be understandable (VRDB is being regenerated).
Try simply to disable VRDB generation and see if it helps.
-
The graphs are made with disabled VRDB and have been made after waiting a very long time, to eliminate startup effects.
-
Here is the answer to my problems:
One of the disk drives was running in PIO mode in stead of in DMA mode. This may happen over time when there have been errors on the disk. Resetting the values in the registry and rebooting cured this problem.
So, disks running in PIO mode will typically show high occurrence of hardware interrupts. Avast makes it even worse, probably also because of some disk activity while scanning.
-
Well, yes, there may be a lot of disk activity when scanning - certinly on the scanned drive ;D, and also e.g. on the drive with TEMP folder. There shouldn't be much disk activity, however, when avast! is "idle" (appart from the writing to MDB database, which is caused by the Jet drivers and seems to be hard to get rid of).
Anyway, thanks for letting us know that you solved the problem!
-
WHY after killing serv, does websrv kick in to 100%? your going to tell me that it was scanning a file on my system, and then once dead turned over to another exe to continue? Someone should explain this behaviour to me so I can understand it better.
I have no idea. Killing ashServ.exe, however, is certainly not a correct method, so I don't really find it relevant. If you stopped Standard Shield provider from the user interface, for example (which should reduce the CPU usage, I guess) and ashWebSv.exe starts eating CPU - then it would be something worth investigating.
Agreed, so I decided after a fresh reboot on one system to see what happens, the entire boot phase is 5x longer than normal. For the record a normal boot on this machine is a little over 2 minutes, today it was closer to 10.
Upon looking at task manager, I can see ashserv.exe is hogging all cpu. Attempts to reduce it's priority resulted in an 'access denied'. Pausing or terminating the various sheilds with the Avast GUI did nothing to reduce the load.
I watched it scan 1000 files during the boot phase (according to the counter in the GUI), simply doing what I have deemed normal behaviour. Still nothing to determine why the load is so high.
I did find something worth mentioning. At this time TeaTimer was very active and may very well be interferring or conflicting.
I went into services and stopped ashserv.exe, TeaTimer went to full load for about 10 seconds then load resumed normal idle.
Restarting ashserv.exe from services resumed protections but without the heavy load.
So, OBVIOUSLY some update has changed vast characteristics about how this process starts and the interference level of said startup.
I would like to hear a concrete answer to this issue, and verification of the changes to the program.
J.
-
The graphs are made with disabled VRDB and have been made after waiting a very long time, to eliminate startup effects.
Hmm, I have merged my icons, so I don't know if one or the other is happening, but I'm positive my settings are not to generate databases during activity.
This would make sense, but why all of a sudden is this happening, especially after the flurry of updates last week?
-
Agreed, so I decided after a fresh reboot on one system to see what happens, the entire boot phase is 5x longer than normal. For the record a normal boot on this machine is a little over 2 minutes, today it was closer to 10.
Do you have any firewall installed in your computer?
Upon looking at task manager, I can see ashserv.exe is hogging all cpu. Attempts to reduce it's priority resulted in an 'access denied'. Pausing or terminating the various sheilds with the Avast GUI did nothing to reduce the load.
So, are you saying the even if you choose "Stop on-access protection" from the avast! tray icon context menu, ashServ.exe keeps using 100% CPU?
So, OBVIOUSLY some update has changed vast characteristics about how this process starts and the interference level of said startup.
I would like to hear a concrete answer to this issue, and verification of the changes to the program.
I'm afraid I'm not aware of any such changes.
Hmm, I have merged my icons, so I don't know if one or the other is happening, but I'm positive my settings are not to generate databases during activity.
When VRDB is being regenerated, you can see the VRDB icon - even if they are merged in the normal state.
-
Upon looking at task manager, I can see ashserv.exe is hogging all cpu. Attempts to reduce it's priority resulted in an 'access denied'. Pausing or terminating the various sheilds with the Avast GUI did nothing to reduce the load.
This looks a lot like my problem. Have you checked that the IDE ATA/ATAPI controllers are set to some DMA mode and not to PIO mode.
You can find this if you go to Control Panel - System - Hardware - Device Manager - Expand IDE ATA/ATAPI controller - Right click each IDE channel - Properties - Advanced Settings - Look at Current Transfer. If one of these are set to PIO mode, you are in this kind of shit.
If that's your trouble, the remedy is in http://www.michna.com/kb/WxDMA.htm.
-
Agreed, so I decided after a fresh reboot on one system to see what happens, the entire boot phase is 5x longer than normal. For the record a normal boot on this machine is a little over 2 minutes, today it was closer to 10.
Do you have any firewall installed in your computer?
Of course, Tiny PF 2005 Pro. Don't even think of blaming this on my firewall. I personally configure this product and have a expert knowledge of it.
Upon looking at task manager, I can see ashserv.exe is hogging all cpu. Attempts to reduce it's priority resulted in an 'access denied'. Pausing or terminating the various sheilds with the Avast GUI did nothing to reduce the load.
So, are you saying the even if you choose "Stop on-access protection" from the avast! tray icon context menu, ashServ.exe keeps using 100% CPU?
That is exactly what I'm saying.
So, OBVIOUSLY some update has changed vast characteristics about how this process starts and the interference level of said startup.
I would like to hear a concrete answer to this issue, and verification of the changes to the program.
I'm afraid I'm not aware of any such changes.
What were the changes in the last program updates?
Hmm, I have merged my icons, so I don't know if one or the other is happening, but I'm positive my settings are not to generate databases during activity.
When VRDB is being regenerated, you can see the VRDB icon - even if they are merged in the normal state.
Then this is not an issue for me.
-
Upon looking at task manager, I can see ashserv.exe is hogging all cpu. Attempts to reduce it's priority resulted in an 'access denied'. Pausing or terminating the various sheilds with the Avast GUI did nothing to reduce the load.
This looks a lot like my problem. Have you checked that the IDE ATA/ATAPI controllers are set to some DMA mode and not to PIO mode.
You can find this if you go to Control Panel - System - Hardware - Device Manager - Expand IDE ATA/ATAPI controller - Right click each IDE channel - Properties - Advanced Settings - Look at Current Transfer. If one of these are set to PIO mode, you are in this kind of shit.
If that's your trouble, the remedy is in http://www.michna.com/kb/WxDMA.htm.
Not for me, I'm using SATA drives in a raid array on this particular PC.
-
Not for me, I'm using SATA drives in a raid array on this particular PC.
Ok then, install Process Explorer http://www.sysinternals.com/Utilities/ProcessExplorer.html and have a look at the graph of the Interrupts process. If that is constantly high, you have a hardware problem similar to mine.
-
Do you have any firewall installed in your computer?
Of course, Tiny PF 2005 Pro. Don't even think of blaming this on my firewall. I personally configure this product and have a expert knowledge of it.
Well, you might have expert knowledge of it, but the fact is that some firewalls perform a "scan of applications" when they start, probably extracting icons from every executable they have a rule for, maybe even more of them. This scan, however, also triggers avast! scanning of the corresponding executables - as they are accessed. Such a thing really increases the boot time significantly, even by minutes.
So, are you saying the even if you choose "Stop on-access protection" from the avast! tray icon context menu, ashServ.exe keeps using 100% CPU?
That is exactly what I'm saying.
There must be some scan causing the CPU consumption... if you stop Standard Shield and let the changes be persisted (and restart the computer) - does the high initial CPU usage still remain there?
What were the changes in the last program updates?
http://www.avast.com/eng/av4_revision_history.html
-
2+ years I've been using Avast, and Tiny Together, NEVER had an issue of 'scanning'
Yes, TPF does scan files in REAL TIME, just as AVAST does, so this is not the problem. ONLY AVAST has had any recent changes, so again I attribute this cpu issue to avast.
Since no one wants to explain this behaviour, other than assuming it's something I'm doing, which is not the case, I will have no choice but to dump Avast in favor of a better more effective solution.
Thanks anyways.
-
Not for me, I'm using SATA drives in a raid array on this particular PC.
Ok then, install Process Explorer http://www.sysinternals.com/Utilities/ProcessExplorer.html and have a look at the graph of the Interrupts process. If that is constantly high, you have a hardware problem similar to mine.
Done, unfortunately this simply back up what I've already said. Truthfully Tiny firewall has a full process inspection tool since it does provide excellent stateful inspection, and true host integrity functions unlike many other inferior firewalls.
Cheers.
-
OK, I am just saying that there were no relevant changes in avast! recently.
-
im getting very high cpu usage also .. with uTorrent running..
-
Done, unfortunately this simply back up what I've already said.
What did it say on the hardware interrupt process?
Truthfully Tiny firewall has a full process inspection tool
Yeah, but does it filter out the hardware interrrupt process?
-
im getting very high cpu usage also .. with uTorrent running..
What were your results in the CPU time taken by hardware interrupts?
-
im getting very high cpu usage also .. with uTorrent running..
What were your results in the CPU time taken by hardware interrupts?
come again ?
-
come again ?
This is from an earlier post in this discussion:One of the disk drives was running in PIO mode in stead of in DMA mode. This may happen over time when there have been errors on the disk. Resetting the values in the registry and rebooting cured this problem.
So, disks running in PIO mode will typically show high occurrence of hardware interrupts. Avast makes it even worse, probably also because of some disk activity while scanning.
This I found out by running Process Explorer.
Please read pages 1 and 2 of this discussion. It's all there.
-
ive already read the entire thread.. just didnt understand the question...
and ive already checked.. no pio here ..
-
I'm getting a high CPU usage as well.
It's not a recent update problem. I'm using 4.6.691, a build that's worked perfectly up until recently, now it's coming up with the same problem.
Shutting down all scans does nothing (ie. "Stop On-access Protection") ashServ.exe still hogs processor usage, is stuck on "High" priority, and refuses to let me change it's priority. The only way to fix it, besides restarting the computer, is killing the process.
My hard drives are also set at DMA, not PIO, before anyone asks. Plain, simple IDE drives, none of this fancy SATA stuff LOL.
Any ideas so far?
'Shady
-
and ive already checked.. no pio here ..
My hard drives are also set at DMA, not PIO, before anyone asks. Plain, simple IDE drives, none of this fancy SATA stuff LOL.
Apparently nobody wants to run Process Explorer to look at the hardware interrupt process time.
-
and ive already checked.. no pio here ..
My hard drives are also set at DMA, not PIO, before anyone asks. Plain, simple IDE drives, none of this fancy SATA stuff LOL.
Apparently nobody wants to run Process Explorer to look at the hardware interrupt process time.
i ran it the first time i read your post...
-
I'm getting the same error but with 43% CPU Spikes. If i kill the process my comp is back to normal again. I use to get the same problem awhile ago, not all the time though, it randomly happens. I've just recently upgraded my comp and reformatted the old harddrive and it was working normal for the first week or so, then started getting the CPU Spikes back. I have been using Avast! for about 2years now and only first started noticing this problem late last year.
The last scanned file at the moment is a irc log file.
Im currently only using windows firewall. Running Windows XP Media Center sp2. The only other programs iv installed since the reformat on this computer is Spybot - Search and Destroy and Adaware, not sure if they have any problems with avast!.
???
**EDIT**
Seem to have found a solution for my comp, it seems ashServ.exe only spikes the CPU when its scanning a relatively large .log file, I noticed someone earlier mentioning how they changed their .log file name, instead i've moved all my irc log files onto an external hdd and there doesnt seem to be anymore problems for now. Hope this helps. :P
-
***
Welcome to the forums, Kyosuke. :)
Thank you for posting and editing in a solution to your problem. Hopefully, this will help some of the others with this similar problem.
I have used Ad-Aware & SpyBot for years without either one having a conflict and in the now more 2 years of Avast use, no conflict at all.
Please come back often, learn more, and maybe help others. :)
***
-
Thanks ;D Always glad to help out. Hopefully in future updates avast! can be tweaked to scan these files without anymore issues (assuming that it just isnt my comp) :D
-
I too had problems with logs causing high cpu useage via ashserv. As a result of the advice in the thread I have curred the problem.
I suggest that a counter be put into avast and that if the same file is continuously being scanned a popup asks if the user wants to put this automatically in an exclusion list.
Robin
-
***
Welcome to the forums, robbyn. :)
We are glad that you were able to find help here for your problem.
If you have not already done so, you might want to post your suggestion in this thread of the forums ......
New features for the next major avast! release [WISHLIST] http://forum.avast.com/index.php?topic=12640.405
Please come back often, learn more, and maybe help others. :)
***
-
I'm also having issues with P2P Shield when running emule, bittorent or uTorrent.
I terminated P2P Shield and now my CPU is back to normal and my downloads are also more steady ;-)
I haven't seen this bug before so I would think it is due a relatively recent update.
Note: I'm on XP latest SP and updates, all disks are UDMA and SATA running full speed. There is no particularly high interupts reported by Process Explorer.
Avast folks, can you update P2P Shield and have it working correctly!!!! I hate having P2P shield off ;-(
-
I haven't seen this bug before
Why are you calling it bug?
Are you sure you're not downloading infected items?
-
Hello to all.
I would like to report an occurence of ashserv.exe having spikes of high usage when using the Mozilla email client.
On a clean WinXP system (AMD Athlon XP 2000+, 1GB RAM) with Mozilla Thunderbird or Seamonkey Project e-mail client, with junk mail filters turned on or off, every Avast scanning operation runs fine, doesn't hog the system abnormally. But after an Avast upgrade some months ago, I noticed that junk mail filtering and normal opening of email messages got considerably slower, invoking a 1-3 second pause before loading the body of the message (even text with no images). Deleting and sorting messages also got less responsive. The task manager showed ashserv.exe having short spikes of 90-100% CPU usage when opening a message in the e-mail client.
After reading this thread, I turned the sensitivity of the standard shield from High to Normal and now, things seem to run fine - emails load almost immediately. I'll post an update if this proves wrong. What interests me is, what have I "lost" in scanning effectiveness with this change of settings and if there is another way of doing it better.
Thanks!
-
See this post - you may well have the same issue:
http://forum.avast.com/index.php?topic=23424.msg194826#msg194826
-
See this post - you may well have the same issue:
http://forum.avast.com/index.php?topic=23424.msg194826#msg194826
Indeed. I have noticed with the On-access scanner, that Avast scans the whole Thunderbird/Seamonkey mailbox file, but I never thought that with the High sensitivity setting, it unpacks it in its whole for EVERY single message I view. How my Avast settings got to High, I can't say. :), but Normal, as chocholo reports in the thread above, is just fine, High is reserved for suspicious infections.
I knew about the "deleting" of emails, but I forgot to compact the mailboxes regulary. Thanks for the reminder, alanrf.
My problems with Avast/Thunderbird-Seamonkey have been resolved. -.-
-
Hi There
I too have used Avast since I was born, and have just started getting 80-90% CPU with ashserv and tracked down to the p2p shield whilst downloading with uTorrent. Have tried your suggestions with no luck! What else can I do?
-
I too have used Avast since I was born, and have just started getting 80-90% CPU with ashserv and tracked down to the p2p shield whilst downloading with uTorrent. Have tried your suggestions with no luck! What else can I do?
Are you using the last avast version?
uTorrent was already removed of the 'mail application' scanned by Internet Mail provider and due to high CPU usages...
So, something is strange in your computer...
-
Yes everything is up to date. The file resume.dat may have been the one it was getting stuck on....I think... ???
-
I have the same problem. I'm using the last version of Avast and uTorrent.
Sometimes my CPU usage goes to 100% and everything stops.
I'm reading the topics about this issue, but couldn't find any solution until now.
I like both programs, they're lightweight for my old computer, and don't want to change any of them.
But if this continues...
-
hi guys hope this will help, im using avast home & i got the same problem, i finally found the culprit that's causing my avast jam up my usage. in my case it was a particular torrent that i was downloading using utorrent, so i disable that torrent & everything went back to normal. i also notice that it only happened after I updated my virus base.
hmmmm problem solved but wondering why this happened..............anyone?
-
same here - only happened on one particular torrent....so far!
-
Though this being over 20 days old, I want to confirm just once more
that stopping P2P shield cures the problem, when using Utorrent and Avast.
Thanks. Without this thread I would still be cursing about the cpu peak.
//Robert
-
Stopping P2P shield cures the problem
It does not cure the problem... it just take out the symptoms of the problem...
Maybe you can search the board for utorrent and try to exclude just the particular torrent that is bringing trouble, scanning it as soon as it finished and before running or executing it.
-
Hi,
today I noticed that my machine started to stop/start Winamp while I was listening music, the cursor was irresponsive on clicking, music slowed down and become intermittent (!!!) and CTRL-ALT-DEL have no taskman window for about 8 seconds. Then I saw that the CPU was 100% ??? used by Ashserve. It continued in this way for several minutes, forcing also some application to crash.
I looked on Google and I found that this seems a rather common problem, and that people does not have very clear ideas on the causes. But why it happened so suddenly to me ?
MY ANALYSIS:
- yesterday I have done the avast! Program Update (now 4.0 Build 4.8.1229 - Xtreme Toolkit 1.9.4.0) ;)
- I was DOWNLOADING with GetRight Pro 6.3e some files from Microsoft.com in multipart mode.
I have always used getright with avast in the past and I had no big problems. But this time I was downloading a file of about 1GB...
I noticed that in the hang-up specific moment Getright said “99% completed” on the status bar; this means that Getright was copying and merging the multipart pieces to create the full 1GB file, and of course the poor avast was desperately trying to REALTIME scan & protect what Getright is writing; I could imagine that saving a 1GB .MSI (that in addition is considered an executable :o not a static file as a MPG AVI ZIP....) force avast to deeply scan the whole 1GB file at high System realtime priority .... and of course this take the 100% of CPU and everything hang-up until the whole 1GB SCAN is complete. I think that to do the things worse Getright try to do the copy-merge using high system priority.
So I think that nowadays whoever downloads big files, especially if they are considered potentially dangerous by avast, will have this problem when avast will deeply realtime scan a file of 1 or 4 GB !!!! :o
Note that it should happens ONLY if the people use downloaders capable of multipart-split mode, because during the normal download avast should be able to realtime scan the multipart files written (avast is faster than internet) but at the end there is the multipart merge to the BIG ONE and avast is upset !!!!
Dear avast Team,
- is my analysis correct ?
I had the same problem on my PC dedicated to VIDEO production, and I config avast to ignore MPG,AVI,IMG,ISO,NRG,MP2,WMV and all other multimedia files. That solved the problem and Pinnacle run smoothly while avast stopped to realtime scan GIGA AVI created by Pinnacle.
- how can be solved the issue of downloading GIGA files with Realtime protection on in multipart?
Till today it was not very common copying and saving 4GB files, but now (epecially with people that have P2P dedicated machines) this IS VERY common!
In addition big .MSI files increase the problem since they are considered executable.
I do not have an answer at the moment, what do you suggest ?
Cheers
antimix
-
I was getting ashserv.exe cycling between about 30 and 95% of CPU. The problem turns out to be on an IBM T40 an HTML log file maintained by the internet connection, getting continually rescanned. I excluded the file and now it works well.
-
I was getting ashserv.exe cycling between about 30 and 95% of CPU. The problem turns out to be on an IBM T40 an HTML log file maintained by the internet connection, getting continually rescanned. I excluded the file and now it works well.
Well... you've find the solution. Welcome to avast forums.
But, it will be good to know which is your Standard Shield security level, High or Normal?