This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

High CPU consumption for swi_fc.exe

OS:Windows 10 with Sophos endpoint 10.8.3

My cpu consumtion is alway high. High CPU consumption for swi_fc.exe and savservice.exe. these two processes are always in top 10 of CPU consumption. When I open a new browser/browsers it becomes worse and the CPU tanks to 100% making my system unresponsive temporarily. can anyone guide me to some diagnostics so I find out why this is happenning.

see screenshot below for average CPU consumtion

This thread was automatically locked due to age.

Parents

+1 DianneY over 4 years ago

Hello,

It looks like msSense.exe (description says it is part of Windows Defender) is also at play here and is using up a lot of CPU. Can you disable this and see if your CPU numbers are better?

If your CPU or performance still does not change after disabling Windows Defender or MS Security suite, and is still causing your machine to be unresponsive, please follow the recommendations in this KB:

Sophos Central Endpoint: Basic troubleshooting

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel

Reply

+1 DianneY over 4 years ago

Hello,

It looks like msSense.exe (description says it is part of Windows Defender) is also at play here and is using up a lot of CPU. Can you disable this and see if your CPU numbers are better?

If your CPU or performance still does not change after disabling Windows Defender or MS Security suite, and is still causing your machine to be unresponsive, please follow the recommendations in this KB:

Sophos Central Endpoint: Basic troubleshooting

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Moreno Fernandes over 4 years ago in reply to DianneY

Thanks will try this
Cancel
Vote Up 0 Vote Down

Cancel
0 jak over 4 years ago in reply to Moreno Fernandes

Do you see it with "Version 10.8.4.3 VE3.74.1"

https://downloads.sophos.com/readmes/sesc_onprem_rneng.html

I suspect it could be this:

WINEP-13683

Sophos Anti-Virus

Resolved a resource leak seen with EPP in some configurations.

Swi_fc is a component of EPP. If the process stops and then starts I assume it's fine for a while?

You can stop it by closing all browser processes, e,g. Chrome.exe, Iexplore.exe, etc and stop the swi_filter service. The running swi_fc.exe should then exit. You can kill it if not. When you start the swi_filter service again, a new swi_fc.exe will appear, does that run OK for a while? If so I'm sure it's the above issue.

Regards,

Jak
Cancel
Vote Up 0 Vote Down

Cancel