This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos slow down while printing

Hi,

I have Sophos SBE and our client computers are 64bit WIN7. All of the clients have Sophos Endpoint Security and Control 9.5.

We have a konica Minolta BizHub C250 with latest driver, which also really slow. Yesterday I realized, that while i'am waiting for the printing so much.
While word or outlook is waiting for the printing process, the whole computer freeze, and SavService.exe eat my processor's approx 30-40%.

I disabled on-access scanning and the printing was really fast without waiting.
When i try to modificate anything in the printer properties sophos also slow down!

I would like to make some exclusions, but i have no idea how many dir's to add.

Any comment are welcome.

:9385


This thread was automatically locked due to age.
Parents
  • HI,

    If you have a test machine I would suggest as a test removing detours (http://www.sophos.com/support/knowledgebase/article/112099.html).

    To do so, open the keys:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs

    and

    HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs

    if running on a 64 bit test machine and remove the entry to load the Sophos detours dll.  Please back up the keys before doing so or copy of the paths to the Sophos DLLs in both places so they can be added back later.

    You would then need to reboot to ensure all processes are no longer hosting detours.

    Once booted back up try prinitng, if it works it puts us in the right area.  I would suggest turning on-access back on.

    If removing detours doesn't help I would suggest:

    1. Download Process Monitor (http://technet.microsoft.com/en-us/sysinternals/bb896645) and start capturing

    2. Emulate the problem.

    3. Stop capturing.

    4. Open the Tools menu in Process Monitor and look at the file summary.  This might show which files are being constantly opened etc.. during the process.  Maybe excluding something in there could be an option.

    Regards,

    Jak

    :9457
Reply
  • HI,

    If you have a test machine I would suggest as a test removing detours (http://www.sophos.com/support/knowledgebase/article/112099.html).

    To do so, open the keys:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs

    and

    HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs

    if running on a 64 bit test machine and remove the entry to load the Sophos detours dll.  Please back up the keys before doing so or copy of the paths to the Sophos DLLs in both places so they can be added back later.

    You would then need to reboot to ensure all processes are no longer hosting detours.

    Once booted back up try prinitng, if it works it puts us in the right area.  I would suggest turning on-access back on.

    If removing detours doesn't help I would suggest:

    1. Download Process Monitor (http://technet.microsoft.com/en-us/sysinternals/bb896645) and start capturing

    2. Emulate the problem.

    3. Stop capturing.

    4. Open the Tools menu in Process Monitor and look at the file summary.  This might show which files are being constantly opened etc.. during the process.  Maybe excluding something in there could be an option.

    Regards,

    Jak

    :9457
Children
No Data