Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 6 subscribers
  • Views 1340 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Intercheck maxing out my CPU's.

countryman

It's triggered when using Chrome and visiting this page   http://www.gmb.org.uk/pdf/SX%20Gullible%20and%20Guilty%20v7b.pdf

Chrome says 'waiting for cache' and Intercheck goes into overdrive.  Force Quit of Chrome.  Intercheck still maxed out. Force quite of Intercheck and up it pops again like a bad penny.  Try to retstart the iMac and you can't...spinning wheel.  Only way is to pull out the mains plug.

Safari accesses the website OK. 

:1003033


This thread was automatically locked due to age.
Parents
  • 0

    After more review, it appears that after 30 min or so, Intercheck finally recovers.  It appears that Chrome is dynamically building the PDF as it downloads, and each time the file is rewritten, we re-scan it.  The PDF is triggering the beginning of a detection due to some suspicious characteristics within the incomplete PDF files, with the result that ten instances of the file are being very thoroughly examined at the same time.  Chrome appears to rewrite this particular file over 50 times, so Intercheck is scanning 10 versions of the file at a time until all 50 have been completed.  With the in-depth scanning, element unpacking, etc. this takes a while.  With the complete PDF, none of this appears to be an issue, as the complete PDF does not appear suspicious to the scanner.

    If you turn off Chrome's in-line PDF viewing, this problem will go away.

    :1003041
Reply
  • 0

    After more review, it appears that after 30 min or so, Intercheck finally recovers.  It appears that Chrome is dynamically building the PDF as it downloads, and each time the file is rewritten, we re-scan it.  The PDF is triggering the beginning of a detection due to some suspicious characteristics within the incomplete PDF files, with the result that ten instances of the file are being very thoroughly examined at the same time.  Chrome appears to rewrite this particular file over 50 times, so Intercheck is scanning 10 versions of the file at a time until all 50 have been completed.  With the in-depth scanning, element unpacking, etc. this takes a while.  With the complete PDF, none of this appears to be an issue, as the complete PDF does not appear suspicious to the scanner.

    If you turn off Chrome's in-line PDF viewing, this problem will go away.

    :1003041
Children
No Data