Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 15 subscribers
  • Views 12583 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

sophosfilescanner.exe high cpu usage

Jelle

After reboot I see high cpu usage of Sophos File Scanner. It runs between 60 ad 80 percent since about 2 hours.

Currently installed version:

Running Windows 10 Pro 20H2



This thread was automatically locked due to age.
Parents
  • 0

    Hi

    On how many machines you are seeing this issue? We will need an in-depth investigation with the help of Procmon logs. 

    Shweta

    Community Support Engineer | Sophos Technical Support
    Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
    The New Home of Sophos Support Videos! - Visit Sophos Techvids
  • 0 in reply to Shweta

    seems the issue is back. Sorry for all the replies. I should have waited longer. Permanent high cpu usage is back. Disappointed

    Regards, Jelle

    Sophos XG210-HA (SFOS 18.0.4) on SG210 appliances with Sandstorm and 1x AP55
    Sophos Central with Intercept X Advanced, Device Encryption, Phish Threat, Mobile Control Advanced

    If a post solves your question use the 'This helped me' link.

  • 0 in reply to Jelle

    I would suggest capturing a quick etl trace and submitting it to Support, E.g. when you have the issue run from an admin prompt:

    wpr.exe -start GeneralProfile

    Leave it running for 30 seconds while the issue is occurring and then run:

    wpr.exe -stop C:\sophossfsgp.etl

    This will take maybe a minute to complete but you should be able to zip up the etl file and if there is a directory with the same name include that.

    If you fancy taking a look, download the Windows Performance Analyzer tool from the MS Store or download the SDK and install Windows Performance Toolkit.  If you initially just focus on CPU sampled, look where the time is spent, you will probably need to enable/load symbols to make much sense of it.

Reply
  • 0 in reply to Jelle

    I would suggest capturing a quick etl trace and submitting it to Support, E.g. when you have the issue run from an admin prompt:

    wpr.exe -start GeneralProfile

    Leave it running for 30 seconds while the issue is occurring and then run:

    wpr.exe -stop C:\sophossfsgp.etl

    This will take maybe a minute to complete but you should be able to zip up the etl file and if there is a directory with the same name include that.

    If you fancy taking a look, download the Windows Performance Analyzer tool from the MS Store or download the SDK and install Windows Performance Toolkit.  If you initially just focus on CPU sampled, look where the time is spent, you will probably need to enable/load symbols to make much sense of it.

Children
No Data
Unfiltered HTML