Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Runaway Intercheck Process

There have been sporadic reports of problems with memory leaks or CPU usage. I've had strange problems since Lion. Since Mountain Lion didn't resolve them, I uninstalled everything that I had added, menu bar toys and pref panes, to see if one of those was causing me grief.

The symptoms were that free memory was rapidly eaten up and became inactive. Sometimes, the machine would becaome very sluggish and almost unusable.

After 24 hours, I found no issues and I was doing what I always do. Then I started reloading. The third item was Sophos. I downloaded the Mountain Lion version and installed. I have on-access scanning on. While doing these tests, I had Activity Monitor open all the time.

I opened iTunes and did a check for updated apps and almost immediately the free memory started to decrease and I watched the Intercheck process using anywhere from 25 to 60 percent of the CPU. Even when iTunes finished, Intercheck kept up its CPU utilization. I had to reboot to stop it.

I uninstalled Sophos again and continued to watch the system. I did the same thing in iTunes and nothing happened. I've been running for two days now with no Sophos with no problem so I'm convinced that Intercheck was my problem all the way back to Lion and possibly when I first installed Sophos. I had tried to isolate the problem app but apparently wasn't thorough enough.

It's unfortunate because I liked Sophos and it seems that it's only a few systems that are affected this way. However, I'll have to find another anti-virus solution. I'm posting this for the Sophos folks so they can investigate as well as any other poor souls who are tearing their hair out.

Bob

:1008894


This thread was automatically locked due to age.
  • Thank you Bob.

    We are seeing some similar behavior on select Mac Pros here in our environment.

    You've stated the experience clearly, though for us there are some network dependencies and we cannot fully isolate Sophos.

    In fact due to Xsan conectivity and proxy complexities our issues have leaked into login functionality and Finder operations.

    That doesn't change the fact that the intercheck process is hogging the show in Activity Monitor.

    :1010010
  • I've noticed the same behavior on Mountain Lion.  My system was constantly crashing while I was running a file syncing operation.  Even opening a terminal shell window was not functioning.  

    I finally got the jump and ran a process check before the file sync'ing operation started and could see the Intercheck CPU spiking.  I've disabled Sophos while this file sync operation runs and my Mac is functioning normally.  There may also be some high overhead associated with Mac Outlook as well, but that is indeterminate.  

    I may choose to run with Sophos disabled and then run scans periodically in post.  This is obviously not ideal from a risk perspective, but may be the trade-off unless there's an update that can fix this.  Alternatively, configuring exclusions may help address the issue, but I don't have time for it right now.

    :1011176