Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 1 subscriber
  • Views 18259 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos slow down while printing

Sztrovy

Hi,

I have Sophos SBE and our client computers are 64bit WIN7. All of the clients have Sophos Endpoint Security and Control 9.5.

We have a konica Minolta BizHub C250 with latest driver, which also really slow. Yesterday I realized, that while i'am waiting for the printing so much.
While word or outlook is waiting for the printing process, the whole computer freeze, and SavService.exe eat my processor's approx 30-40%.

I disabled on-access scanning and the printing was really fast without waiting.
When i try to modificate anything in the printer properties sophos also slow down!

I would like to make some exclusions, but i have no idea how many dir's to add.

Any comment are welcome.

:9385


This thread was automatically locked due to age.
Parents
  • 0

    That's right QC.

    0-day malware is the problem. 30 to 40 new malware variants get added to SAV every day. If you exclude the Spool folder you risk the system to be infected. Like I said it's a prefered location for a couple of (well spread) malware variants out there. I've seen it multiple times. It's not rare. Malware authors update their creation constantly which at the same time means (depending on the amount of code changes) it can be 0-day already tommorow and depending on your settings (HIPS enabled?) it will not be detected if you exclude Spool.

    :9893
Reply
  • 0

    That's right QC.

    0-day malware is the problem. 30 to 40 new malware variants get added to SAV every day. If you exclude the Spool folder you risk the system to be infected. Like I said it's a prefered location for a couple of (well spread) malware variants out there. I've seen it multiple times. It's not rare. Malware authors update their creation constantly which at the same time means (depending on the amount of code changes) it can be 0-day already tommorow and depending on your settings (HIPS enabled?) it will not be detected if you exclude Spool.

    :9893
Children
No Data