Avast process ashWebSv.exe using a lot of RAM!

[zeroality]

This has never happened before but 2-3 days ago, I totally uninstalled Avast and re-installed the latest Home version.

I also registered it for the first time - I've never registered an Avast product before. I didn't know why it kept expiring.

Anyway, a couple of days ago, my computer was getting really slow (I'm talking about a 3.2 ghz with 1.5 gigs of RAM here) so I decided to see what processes were running. Well, one of the avast processes was using over 500,000KB of RAM! I terminated it and everything seemed to be fine after that.

Today, it happened again so I looked - 200,000 KB of RAM! Terminated.

Now I want to know if there's a fix for this? A registry fix or something? I'm pretty well versed when it comes to PCs so I can give you more information if you need it or whatever.

[Eddy]

Is Avast scanning at that time?
Are you downloading when this happens?
What are the settings in Avast?
What OS?
What other security (related) software do you have installed?
etc etc.

We can't give proper help without knowing details

[DavidR]

Which provider is using the RAm and what is its CPU load?

Mine shows no such memory load.

[zeroality]

No, avast was not scanning - except for the 'resident protection'.
No, I wasn't downloading but was browsing a ton - I'm a "power user".
Avast is on default settings.
Windows XP Home SP2.
Spybot's TeaTimer extension is the only one that runs in the background. I also have Ad Aware SE, Registry Mechanic and Spybot Search & Destroy. I think that's all.

ashWebSv was the process. CPU load was negligible, it's just the RAM load that was excessive.

Thanks in advance and if you need more info, post back.

[zeroality]

It's still doing it.

[Eddy]

What are your settings for the webshield provider?

[zeroality]

Default. The only setting I've ever changed in Avast is to disable logging.

[StopMe]

Did you click on the spinning "a" icon couple times?  What programs were you running before you recieved this high RAM usage?

[lukor]

Zero, this is really interresting.

Could you create a memory dump for this process and upload it to our anonymous ftp server at ftp://ftp.asw.cz/incommng.

To create the dump, download and run this: www2.asw.cz/~rypacek/userdump.exe

It is executed as follows:

Code: [Select]

userdump ashwebsv.exe
The dumpfile will be created in current directory with the name ashwebsv.dmp.

Thanks.
Lukas.

[igor]

I would ask: were you downloading anything at the time you checked the memory usage?

[zeroality]

Nope. All I did was restart my PC and there it was. No downloads at all.

Here's the dump:

Jesus... it's 170 megs. It's gonna take me 4 hours to upload it.

Will post back when it's uploaded.

[lukor]

Jesus... it's 170 megs. It's gonna take me 4 hours to upload it.

Zip it. It will compress pretty well.

[DavidR]

You could try zipping the dump file up, try a program called 7zip as it gives good compression before you upload it.

Edit: I must improve my typing speed

[RejZoR]

Yup,use 7-zip and select Maximal preset when compressing. This will make files way smaller

[zeroality]

Wow. Regular .zip reduced it to only 15 mb. Man, am I glad I re-checked this topic.

http://www.pokerealm.net/zero/ashWebSv.zip