Avastsvc.exe and CPU Usage

[tacoma43]

Approximately 10 minutes after every boot, avastsvc.exe cranks up CPU usage to as much as 50% for about one minute.

This behavior was first noticed with v7 and continues with v8, even after a re-installation.  I'm using only the Mail Shield; all updates are set to "Off" or "Manual"; OS is up-to-date WinXP SP3.

I tried to create a dump file using Sysinternals Process Explorer but got this instead: "Error writing dump file: Access is denied."

This is an inconvenience I can live with; I'm just curious about this unexpected activity and hope to at least understand it if not correct it.

[tacoma43]

Any suggestions about how to further investigate this will be greatly appreciated.

TIA

[DavidR]

The avast anti-rootkit scan happens around 8 minutes after boot, but this is relatively quick and shouldn't have much of an impact.

What are your system specs, CPU and RAM ?

[tacoma43]

That's it — confirmed by disabling, rebooting and not observing the elevated CPU usage.

Thank you for your assistance.

[DavidR]

You're welcome.

I wouldn't just switch it off though, I would be looking at why, because this shouldn't be happening, which is why I asked the supplementary questions.

[tacoma43]

80.02 GB Usable Hard Drive Capacity
46.03 GB Hard Drive Free Space

640 MB Usable Installed Memory

Is that what you requested?

[DavidR]

You didn't mention the CPU, computer processor ?
But if it is similar to your low RAM installed it is likely to be low powered also, that will effect scan duration, but even so the anti-rootkit scan shouldn't hamper the system that much. It does however, depend on what else is running at the time (and browsing) as that would have avast scan that activity over and above the anti-rootkit scan done at 8 minutes after boot.

You can see my system spec in my signature below my posts. Recently I increased the RAM from 2GB to 4GB as RAM is designed to be used and mine was up at 1.6GB in use at times (task manager). So I opted to increase it so that it could possibly be better utilised.

In XP I would say 1GB would be the minimum and 2GB preferable, with that you should see an overall improvement in system performance.

I don't know what other programs you allow to run on boot (but many automatically set themselves to run), you need to be quite brutal in what you allow to run on boot, system resources and security are obviously a must.

[pk]

I tried to create a dump file using Sysinternals Process Explorer but got this instead: "Error writing dump file: Access is denied."

Next time you need turn off avast self protection (settings -> troubleshooting).

[user_1000]

The avast anti-rootkit scan happens around 8 minutes after boot, but this is relatively quick and shouldn't have much of an impact.
(snip)

Actually I have noticed same thing since Avast 7.0. The Avast anti-rootkit scan takes a lots of resources (although it's fast)... and I have a quite powerful computer with plenty of RAM.

However I have resolved this by disabling that feature.

[DavidR]

Well you can see my spec in my signature, which isn't fast by today's system comparisons and I don't see any effect. But the OPs system is a different ball game, which may see an impact.

That said I don't spend time watching CPU activity, so if I don't notice any issue (slow system) I wouldn't go looking.

[user_1000]

Well you can see my spec in my signature, which isn't fast by today's system comparisons and I don't see any effect. But the OPs system is a different ball game, which may see an impact.

That said I don't spend time watching CPU activity, so if I don't notice any issue (slow system) I wouldn't go looking.

I don't spend time to do that neither... but that Avast anti-rootkit scan caused a slowdown also on my system, so I had to disable it, but I'm happy with that solution. It's quite funny that even a heavy virtualization doesn't cause any slowdowns on this system, but Avast does.

I never noticed any impact with Avast 6.0 and earlier.

[tacoma43]

You didn't mention the CPU, computer processor ?

1.50 gigahertz Intel Pentium 4.  The box is 13 years old with a 4.5 year-old replacement HD which probably explains much.

But if it is similar to your low RAM installed it is likely to be low powered also, that will effect scan duration, but even so the anti-rootkit scan shouldn't hamper the system that much. It does however, depend on what else is running at the time (and browsing) as that would have avast scan that activity over and above the anti-rootkit scan done at 8 minutes after boot.

[snip]

...you need to be quite brutal in what you allow to run on boot, system resources and security are obviously a must.

I discovered the avastsvc.exe activity while investigating boot-time sluggishness and freeze ups.  My low-tech solution was to disable resource intensive startup programs and just play FreeCell until avastsvc.exe is finished and then manually start the others, but even FreeCell is affected.

The age of my setup and some applications of questionable compatibility very likely cause most of my problems.  I greatly appreciate your help explaining this mysterious Avast behavior.

@pk: thanks for the instructions re: self protection and dump files!

[DavidR]

Well though your system is somewhat resource challenged it still falls within the minimum speck, but yes there are times when it may struggle. Since the avastSvc.exe is the main scanning engine/service any other activity over and above the anti-rootkit scan is going to add to the overall load.

I just wonder if the avast update may also be running in the background, but that would show up as avast.setup in the task manager, not under the avastSvc.exe.