sophosfilescanner.exe high cpu usage

Hi Jelle

On how many machines you are seeing this issue? We will need an in-depth investigation with the help of Procmon logs. 

Only on my machine. I got no other complains about high cpu usage until now. My machine is also the only one running beta versions.

I deactivated realtime scanning on files through admin settings on my local sophos client. CPU usage went down immediately. Then I reactiveated it. Right now cpu usage seems to be normal.

I don't know why this changed the behaviour. Before my cpu usage was high all day. Even reboots and Sophos updates didn't fix it.

Sophos File Scanner sometimes still raises up to 25% cpu usage but then falls back to 0%.

I would guess that temporary cpu usage is still higher than before, I can hear it from my notebook cpu fan. But at least it is temporary and seems to be limited to around 25%.

Shweta seems the issue is back. Sorry for all the replies. I should have waited longer. Permanent high cpu usage is back.

I would suggest capturing a quick etl trace and submitting it to Support, E.g. when you have the issue run from an admin prompt:

wpr.exe -start GeneralProfile

Leave it running for 30 seconds while the issue is occurring and then run:

wpr.exe -stop C:\sophossfsgp.etl

This will take maybe a minute to complete but you should be able to zip up the etl file and if there is a directory with the same name include that.

If you fancy taking a look, download the Windows Performance Analyzer tool from the MS Store or download the SDK and install Windows Performance Toolkit.  If you initially just focus on CPU sampled, look where the time is spent, you will probably need to enable/load symbols to make much sense of it.

What I can say until now is that the current beta leverages cpu usage significantly on any operation but lowers quite soon. But if I start Firefox (latest release) the file scanner raises to 60-90% cpu usage permanently.