Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 10 subscribers
  • Views 9078 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is Sophos so resource hungry that disk drive gets pushed to 100% usage?

M3dHutchinson

I have a user that finds that her Hard Drive gets pushed to 100% for long periods at a time several times a week.

When this happens her computer's performance slows to a crawl and she cannot comfortably work. When it happens she hears her hard drive running.

I understand our security manager has Sophos scheduled to scan twice a week... Tuesday and Thursday at 7:00 pm. However this user shut here computer down nightly.

Does Sophos Scan run the next time it is up?

Is it common to max the drive to 100% utilization?... or might there be something else to blame?



This thread was automatically locked due to age.
  • 0

    Hi  

    It should not do the scan once the time has been passed as Scheduled scan is just task scheduler defined on the machines.

    I'd suggest you check the resource monitor when the disk utilization is more than 100%. Note the process which is taking disk utilization to 100%.

    Regards,

    Jasmin
    Community Support Engineer | Sophos Support
    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'This helped me' link

  • 0 in reply to Jasmin

    agreed.  

    When Sophos is scanning the drive, is it normal that utilization goes to near 100%, or no?

  • 0 in reply to M3dHutchinson

    Hi  

    If deep scanning in the scheduled scan is enabled and there many archives available on the machine, then Scan probably will take time and may take disk utilization to 100%.

    Ideally, it should not be happening without deep scanning.

    Regards,

    Jasmin
    Community Support Engineer | Sophos Support
    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'This helped me' link

  • 0 in reply to Jasmin

    Is there an archive program running on the machine?

     

    Sincerely,

    Richard

    RichardP

    Program Manager, Support Readiness | CISSP | Sophos Technical Support
    Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.

  • 0

    I'm guessing it is not an SSD given the comment: "she hears her hard drive running"?  Are there any plans to upgrade the computer to a SSD that will certainly make a huge difference.

    That said, it's still possible to determine where the disk IO is coming from.  You don't mention the OS, is it Windows 10?  If so, when you have the issue can you run:

    wpr.exe -start GeneralProfile

    Leave it to run for say 30 seconds when you have the issue and then run:

    wpr.exe -stop C:\GeneralProfile.etl

    Once that has saved and it could take a couple of minutes, maybe on a more powerful computer, load the etl trace file in Windows Performance Analzyer which can be downloaded from the Microsoft Store.  

    You can use this tool to highlight processes causing excessive CPU, files that are being accessed very frequently and everything you might need to diagnose such a problem.

    The other alternative and perhaps a little quicker to get up and running is to run Process Monitor from Microsoft/Sysinternals with a filter for "Duration" is more than "0.1".  What events (mostly likely file) of type read / write have a high value as it might give you something to consider.  A combination of the 2 tools should help.

    Regards,

    Jak

Unfiltered HTML