AshWeb still using 50-90% of the CPU in 4.7.942

[camer0n]

Hi,

This was a problem that occurred at least once or twice a day in the previous release, so I was hoping that the upgrade would fix it - but no such luck. 4.7.942 is still doing it.

Any suggestions?
Thanks
Cameron

[Lisandro]

We will need more information to be able to help you:
- Which OS are you using? Is it up to date?
- Do you use a firewall? Which one?
- Do you have any other antivirus installed in your system?
- Any other security programs that could interfere?
- Any useful information into Control Panel > Administrative Tools > Events, specially 'Errors'.

[DavidR]

What were you doing at the time of the high cpu usage ?
How long does it last ?

Did you happen to be downloading something or was the avast icon rotating ?

[camer0n]

- Which OS are you using? Is it up to date?

 Windows XP sp2, all up-to-date.
 Using IE7 (the same occurred with IE6 previously)

- Do you use a firewall? Which one?

Windows Firewall and the same occurs with it set to off.

- Do you have any other antivirus installed in your system?

 No

- Any other security programs that could interfere?

No, only "Dell help" maybe?

- Any useful information into Control Panel > Administrative Tools > Events, specially 'Errors'.

Went through them all. I could only find one error that occurred twice, but weeks apart, but perhaps unrelated?

Event Type: Warning
Event Source: avast!
Event Category: Client
Event ID: 90
Date:  12/17/2006
Time:  9:45:33 AM
User:  N/A
Computer: XPS
Description:
Function setifaceUpdatePackages() has failed. Return code is 0x20000011, dwRes is 20000011.

- When does it happen?
It's difficult to reproduce on command. It happens while browsing the web, sometimes within minutes of opening the browser. It happened this morning, but tonight I tried for 1/2 an hour to make it happen again and couldn't.

Automatic updates are set to "manual". Everything else is on the default settings.

The next time it happens, perhaps I can take a 'snapshot' of what is running.

Can you recommend a program to do this?

Thanks

[Lisandro]

The next time it happens, perhaps I can take a 'snapshot' of what is running.
Can you recommend a program to do this?

Please check the folder <avast>\data\log
Are there any files called unpXXXX there  (where XXXX is a random number)?
If so, send them to vlk (at) avast.com
They may contain more information about the problem (maybe a link to this thread).

To create the dump, download and run http://public.avast.com/~vlk/hangrep.exe . In the list of processes select ashWebSv.exe and use the Save button. This generates a file which you can either send to Vlk's email address (if it's smaller than e.g. 1 MB, ZIPed), or upload to ftp://ftp.avast.com/incoming .

[DavidR]

A snapshot would be fine, but if it is just indicating the CPU usage, it isn't going to help find the cause, but here is a tool you can use in the future.

WinSnap screen capture (I think Tech uses this) - http://www.ntwind.com/software/winsnap.html which is freeware, it is a relatively simple if basic screen capture tool but it does a relatively good job. I use SnagIt which is a paid for option.

You could customize the Web Shield - 'Show detailed info on performed actions' this will show what is being scanned, it may prove to be a bit of a pain as it eats into screen real estate as it shows the items being scanned.

[camer0n]

I managed to capture it and upload a dump file to the FTP.
Hope it helps.

Thanks

[Vlk]

Huh, what is "Ashweb - select and save.exe"?
Is that the dump you uploaded?

Thanks
Vlk