Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 33043 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SavService.exe is using high amount of CPU on servers

AdelaideShores

Hi,

on all our servers SavService.exe is using high amount of CPU making our servers slow when accessing.

it is constanly staying at 25%of CPU usage when no one access the system expect me monitoring the service usage.

this slow down's our Mail server and Database servers during Day time as everyone useing them continuesly.

this is only happening after the latest update in April.

is there a way to reduce this service usage. i know i can disable On-Access scan but that will leave me open for virus. i do not want to disable it.

please advice,

thank you,

krishna 

:49840


This thread was automatically locked due to age.
  • 0

    Hello,

    Do you have exclusions in place for the various server roles:

    http://www.sophos.com/en-us/support/knowledgebase/35970.aspx

    In the same vein, the approach in this article:

    /search?q= 41851

    to find files which are taking a while to scan may also be of use.

    Other suggestions would be to disable a few components of SAV to see if that helps: e.g. rather than just disabling onaccess, try just setting read only, or just write only on-access scanning. Try turning off behaviour monitoring.  Trying to find what helps is probably the quickest route to understanding the problem.

    Regards,

    Jak

    :49846
  • 0

    Hi Jak,

    the first link is not working.

    i did some folder exclusions. removed read from on access but when a user try to access a file, windows will create a temporary file and this will be treated as write. i have removed the behaviour monitoring.

    still same issue.

    thank you,

    krishna

    :49970
  • 0

    Hello, It hasn't linked the entire line, it should be:

    www.sophos.com/.../35970.aspx

    To prove it is just on-access scanning, if you exclude the drives on the computer does it help?, i.e. C: D:, etc..

    Could it be the scanning of remote files in some way?  They could be excluded as well.

    Anything to prevent it happening would be useful information.

    Regards,

    Jak

    :49974
  • 0

    Hi Jak,

    it is not scanning the remote files. what i found out is, when i login to the server it is scanning the profile so the SavService.exe using high amount of CPU and after the scan it is comming down to 25% and stays there.   so i guess it is the normal behaviour of the software.

    any way thank you for your help.

    krishna

    :50096