2 Replies Latest reply on Dec 16, 2009 9:31 AM by Funkcorner

    ScanningProcess.exe using very large amounts of memory

    Rookie

      I guess I'm mainly looking to David and Paul on this one.

       

      We have had several issues across our network where ScanningProcess.exe appears to consume massive amounts of memory, 1Gb and more. The problem seems to be on machines with very large files, in fact it looks like the amount of memory being used is about the same as the size of the problem file on each machine which leads me to guess that a file is loaded into RAM when it is being scanned. Is that correct?

       

      I've read through this document and the symptoms I'm seeing are not described there:

      http://community.landesk.com/support/docs/DOC-7018

       

      We're using engine 5.0.1.95.

       

      Thanks in advance.

        • 1. Re: ScanningProcess.exe using very large amounts of memory
          LANDave SupportEmployee

          Can you give me more specifics on the operating system and specifications for these computers?

           

          I did see this issue on 64-bit computers about a year ago, but it was reported to Kaspersky and resolved in 5.0.1.95.

           

          The specific issue I was seeing is compressed (.ZIP or .RAR usually) files taking up the same amount of memory as the uncompressed size.   So, in my example, a 4 gig file would take up 4 gig of system memory, and it would start paging and bring the system down.

           

          However, I am surprised to hear this, as from what we have seen it was resolved.

           

          You are 100% sure that you are on 5.0.1.95?

           

          Try scanning an extremely large file, and then also a very large compressed .ZIP or .RAR file and watch the memory usage.   Let me know the results.

          • 2. Re: ScanningProcess.exe using very large amounts of memory
            Rookie

            The machine is XP SP2.

             

            This is the data from the inventory:

             

            Name                        Value
            Agent Running                  True
            Auto Protect                  On
            Definition Install Date       21/10/2009 08:33:20
            Definition Publish Date       16/12/2009 03:52:49
            Definition Version            20091216
            Engine Version             5.0.1.95
            Last Virus Scan             08/12/2009 16:01:19
            Number                        0
            Product Name                  LANDesk Antivirus
            Product Version                  8.80.2.26

            The file was a .log text file.

             

            I'll try to recreate the problem tomorrow and report back.