SophosScanD process consuming up to 95% CPU

this bull**bleep** james i email mary winfield  mary.winfield@sophos.com to fix this

why not repond from real moderate?  you not sophos official just some account.  email mary.winfield@sophos.com

http://www.sophos.com/en-us/company/management/mary-winfield.aspx

Nice one the the temp fix with sudo command, now my fans stopped being thrashed, processor stopped being hammered and my battery has stopped being drained in 2.5 hours.  I am am Microsoft geezer and know how to fix Windows stuff but have no clue with terminal & sudo commands.. 

Hope they fix soon.

Cheers

---

SvenHardt wrote:

this bull**bleep** james i email mary winfield  mary.winfield@sophos.com to fix this

why not repond from real moderate?  you not sophos official just some account.  email mary.winfield@sophos.com

http://www.sophos.com/en-us/company/management/mary-winfield.aspx

---

Hello Sven. I'm not normally on this forum team, but in the interest of letting people know that we have seen this and are looking into it, we posted an update here immediately, rather than waiting for markers to be added to my account.

Yes, Mary is aware of it as well and has received a few e-mails from users about this. There will be more updates coming.

Thank you for your feedback.

James

@SophosSupport Twitter team

thank u jamess i apologize for my tone

i have uninstalled and it is now not so hard on I/O and am macbook is OK aggain. happy to wait for update but  I need you Right away to fix this

Greetings,

My company is a Sophos partner organization who works with Sophos end point and UTM solutions.  I can verify that we are seeing this not only with the home edition (my own home Mac is experiencing this issue), but also across our entire client base of Sophos Antivirus for Mac OS X (the commercial version).  SophosScanD launches, hits the CPU at anywhere from the low 80% to a high of 139%, exits, and then relaunches with the same loop.

This is probably a bad pattern file update based on the overall experience we've had with this today.

I simply wanted to +1 (make that +MANY for our clients) to hopefully add some fuel to the fire to get this resolved ASAP.

We did have clients report sluggish systems and we received alerts from unusually high CPU use throughout the day.  That set us off to investigate and uncovered the results I've noted here.

Sophos:  Please make this a very high priority and get it fixed ASAP!

Typical System Setups:

Mac OS X Mavericks 10.9.4 or Mac OS X Mountain Lion 10.8.6

Sophos Antivirus for Mac 9.0.11 w/ Detection Engine 3.51.0 and Threat Data 5.01

Jason Harrison

Harrison Technology Consulting

I've been having the same problem starting today as well (Sept 15, 2014). Always updated, however I just selected "Update Now" and it downloaded a rather large amount of data (didn't notice exactly how much) but it appears to be a software update—now 9.1.5—so i suspect they are working on it. The problem also seems to have ceased for the last 40 minutes at least and my shell has become noticably cooler. Hope it's a fix, as Sophos has been problem free since I first got it a few years ago.

Hello everyone,

The root cause of this problem is a defect in the 9.0.11 code that causes SophosScanD to repeatedly restart when the virus detection data package hits its normal end of life warning. This warning is simply that: a warning. Your computer would still be fully protected, but the "useful lifetime" of that product version is reaching its end. You probably noticed the warning is also issued by the on-access scanner (Intercheck) but that component does not contain this same defect thus did not restart itself.

The core detection data hit its end of life warning at midlight last night, and it took a while before we realized what was happening. When we did, we immediately took action to update the Mac software to 9.1.5. This version corrects the bug in SophosScanD, and also contains changes that will ensure timely updates of the core virus detection data without requring a product update. Its important to note that this is the same version that has been available as a preview for a few months now, and its proven very stable.

If you check the version of the software you should see 9.1.5 with threat detection engine 3.51 and threat detection data of 5.05. If you aren't currently seeing that version, run the Update Now command from the shield menu.

We are extremely embarrased about this problem, its highlighted two issues: first, this problem should have been caught during our release planning. There is no excuse to have let this happen. Second, our escalation process for critical issues needs to be reviewed. It shouldn't take a social media storm to get our attention in situations like this. We will do better going forward, and I appreciate your input about our progress.

Thanks for the update on what is going on - and on the updated software.

When will this update be available?  I uninstalled the software while I waited for the update so I will need to install from scratch.  So I guess what I really need to know is when will the downloaded version be updated.

Thank you, Bob, for this explanation and the apologies.

I personally was lucky because I had to be out all day - and now there is a solution already in place ...

I updated Sophos tonight (lots of Megabyte compared to "normal"), and the problem seems to be gone.

My versions now: SAV Home Edition 9.1.5 TDE 3.53.1 Threat data 5.05 on a MacBookPro OS X 10.9.4

---

Rumboogy wrote:

When will this update be available?  I uninstalled the software while I waited for the update so I will need to install from scratch.  So I guess what I really need to know is when will the downloaded version be updated.

---

The software is already live and many, many users have updated automatically. If you reinstall it will immediately update to the latest version.