Author Topic: AIS firewall high CPU load  (Read 10315 times)

0 Members and 1 Guest are viewing this topic.

Hermite15

  • Guest
AIS firewall high CPU load
« on: April 21, 2010, 03:10:01 PM »
have no idea why; it happened suddenly when attempting to open some MS online help content (Windows)...content wasn't displayed, while the CPU started to reach peaks (usage). I saw in task manager that Avast firewall service was the culprit. Attempted to stop the service but that was a no go. I had to reboot to stop that.

Anidor

  • Guest
Re: AIS firewall high CPU load
« Reply #1 on: April 21, 2010, 09:48:59 PM »
Have the same problem, adn it just started few hours ago.
It began with couple of blue screen, and then change my windows layout to classic layout.
At first I thought maybe it is a virus. my scan revealed nothing.
And now I got some memory hazard dialog about a service that needs to shutdown (memory overload). it was "afwServ.exe".
It is somehow connected to the firewall (the firewall services stoppedwhen I shut it down, and when I started the services, the process came up again)

Any advises what it could be, and what to do?

Hermite15

  • Guest
Re: AIS firewall high CPU load
« Reply #2 on: April 25, 2010, 04:38:58 PM »
it just happened again, high CPU load on firewall service. Strangely I can interrupt the service but the process keeps running and the only way out to stop this is to reboot. It happened this time in the same conditions: when launching Windows help panel, and it's attempting to connect to "online help"...and fails to do so.

Hermite15

  • Guest
Re: AIS firewall high CPU load
« Reply #3 on: April 25, 2010, 04:44:06 PM »
OK I can only get access to Windows online help when deactivating the firewall (from AIS). Also, something strange happened, when I deactivated it , instead of getting the "UAC like" avast prompt to confirm, I got an actual Windows UAC prompt ;D

Hermite15

  • Guest
Re: AIS firewall high CPU load
« Reply #4 on: April 25, 2010, 05:03:48 PM »
I think the problem is that the needed rule to allow the online help to connect is that the rule for it takes ages to happen. It takes several attempts until this rule comes out, and then all is OK.

Hermite15

  • Guest
Re: AIS firewall high CPU load
« Reply #5 on: April 25, 2010, 11:16:27 PM »
just had to reboot again a few minutes ago, had some high CPU load (between 50 and 100%) from AfwServ.exe while just browsing in Chrome and having a few explorer windows opened...if it happens one more time I will have to deactivate this firewall for good.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11657
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: AIS firewall high CPU load
« Reply #6 on: April 25, 2010, 11:32:07 PM »
It would be very useful if you create a memory dump of the afwServ.exe process while the problem is simulated.

Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

Hermite15

  • Guest
Re: AIS firewall high CPU load
« Reply #7 on: April 25, 2010, 11:42:05 PM »
It would be very useful if you create a memory dump of the afwServ.exe process while the problem is simulated.

Thanks
Vlk

 I don't mind, but I have no way to reproduce it. I got to wait until it happens again...the only thing I can try is remove the rule for Microsoft Online help, and expect it will happen again when I hit F1...I'll post back in a minute.

Hermite15

  • Guest
Re: AIS firewall high CPU load
« Reply #8 on: April 25, 2010, 11:49:01 PM »
OK I removed the MS Online help rule, when launching it I get no rule created again by the firewall, and I get no Online help content either... (it's blocked, but nothing in the fw log showing it and no alert) but no CPU load from the firewall this time...can't reproduce anything right now...

Hermite15

  • Guest
Re: AIS firewall high CPU load
« Reply #9 on: April 25, 2010, 11:57:29 PM »
after a reboot, and also a manual stop/restart of the firewall service (so I don't know if the reboot was enough), I finally get a rule recreated for MS online help, and the content is loaded. So I guess I'll just have to wait until the fw service generate some high CPU load again...nothing more I can tell apart from the fact that it's happened three times now.

Offline lukor

  • Administrator
  • Super Poster
  • ***
  • Posts: 1883
    • AVAST Software
Re: AIS firewall high CPU load
« Reply #10 on: April 26, 2010, 12:11:03 AM »
Hi, in order to be able to create the memory dump you'll also have to disable the Self Defense feature, but I suppose you've already done that.

Hermite15

  • Guest
Re: AIS firewall high CPU load
« Reply #11 on: April 26, 2010, 12:18:52 AM »
Hi, in order to be able to create the memory dump you'll also have to disable the Self Defense feature, but I suppose you've already done that.

Hi,

I can't reproduce the issue anyway...just got to wait until it happens again. Do you mean a full kernel dump by crashing the system purposely when it happens or just a dump file from the process in task manager? no, I haven't disabled the self-defense module, didn't think that was needed for the dump, but now that you mention it OK...again, I cannot reproduce the issue purposely...

chrismo

  • Guest
Re: AIS firewall high CPU load
« Reply #12 on: April 27, 2010, 02:50:37 AM »
I hope it's OK to jump in here, just registered as a user. :)

I've been getting the same problem for a while also. The processor goes off on it's own and seems to be working very hard (high load) and holds that status (full throttle type of thing). It occurs usually after fairly heavy browsing using IE but not always, just sometimes. It has also occurred when using a group of other open programs such as a scanner application along with a PDF creator software. It almost always occurs upon closing one of the applications (this is the case with IE also).

The CPU becomes very active and stays that way indefinitely. An error box usually pops up also, as follows:

afwserv.exe Application Error
The instruction at "0x6710dct7" referenced memory at "0x60b4497c". The memory could not be "read".
Click on OK to terminate program.
Click on CANCEL to debug program.

(note that the memory locations vary each time. I have also had the memory hardware checked and it's 100% OK). Choosing either option sometimes works sometimes doesn't but always turns firewall off. Need to turn PC off and reboot to fix, usually "hangs" for a few minutes before it moves to the "windows is saving your settings" screen.

Offline lukor

  • Administrator
  • Super Poster
  • ***
  • Posts: 1883
    • AVAST Software
Re: AIS firewall high CPU load
« Reply #13 on: April 27, 2010, 05:50:52 PM »
Hi guys,

I have found a problem in afwServ that can be causing these errors. It will be fixed in the next update.

Chrismo, the address 0x6710dct7 has a typo - "t" is not a part of any hexadecimal number. Just to verify, that it is indeed hitting the same code part, if it reappears, could you post the correct message?

Thanks a lot,
PS: if anyone has a memory dump, ("C:\Documents and Settings\All Users\Application Data\Alwil Software\avast5\log\unpXXXX.mdmp" or for Windows Vista/7: "C:\ProgramData\Alwil Software\Avast5\log\unpXXX.tmp.mdmp" ), please post or upload it here.

Thanks.
Lukas.

Hermite15

  • Guest
Re: AIS firewall high CPU load
« Reply #14 on: April 27, 2010, 06:03:21 PM »
OK good to hear thanks ;) will the list or falsely supposed tens of blocked connections, stop appearing in the firewall log too?