Video Screencast Help

COH32.exe CPU usage

Created: 10 Nov 2007 • Updated: 21 May 2010 | 6 comments

I have an issue withthe process COH32.exe. It starts and closes regularly, and uses up 100% CPU when it runs. I can hear the fan on the machine speed up and I think "oh, there's COH32 running again". Is this a part of Symantec's Bloodhound detection or the Proactive Protection? If so, how can I tame it/disable it?

Discussion Filed Under:

Comments 6 CommentsJump to latest comment

paulorf's picture
Searinox,
 
What you are seeing there is indeed the proactive threat protection.
 
I think it runs every 15 minutes by default, but you can change that.
 
If you want to do it for all your clients you just need to configure it in your Antivirus and Antispyware policy in your SEPM. There is a section called proactive threat scan where you can define when you want that scan to be run.
 
You can find detailed information in the Administrator guide (chapter 37 Configuring proactive threat scans) in the Documentation folder in CD 1.
 
paulorf
Searinox's picture
Thank you for informing me how much the default is. I must also ask, is the default proactive scan set to run when new processes start up? I'm having mixed results with COH32. On the one hand it seems to throttle down if I have something else running and I'm not noticing the performance loss, can someone confirm me if the app is designed to behave like that?

Jason1222's picture

I waited for a while, noticing some of the earlier posts about the initial MP1 release.

I downloaded and installed MP1 (MP1a, maybe?) from Fileconnect today.

I have noticed, now for the first time- COH32.exe is through the roof.  Took up 99% CPU and 600 Megs of memory...!!

Waited until it was done doing whatever it is it was doing and now I can work with my machine again.

I am hoping this is an isloated incident on a single machine, mine, after the updates were pushed from the server...  Can anyone confirm this is a 1 time thing or am I going to have issues in production environment/servers and the rest of the network.

Also, is there a fix for this?  Or an expected one?

Jason1222's picture

I waited for a while, noticing some of the earlier posts about the initial MP1 release.

I downloaded and installed MP1 (MP1a, maybe?) from Fileconnect today.

I have noticed, now for the first time- COH32.exe is through the roof.  Took up 99% CPU and 600 Megs of memory...!!

Waited until it was done doing whatever it is it was doing and now I can work with my machine again.

I am hoping this is an isloated incident on a single machine, mine, after the updates were pushed from the server...  Can anyone confirm this is a 1 time thing or am I going to have issues in production environment/servers and the rest of the network.

Also, is there a fix for this?  Or an expected one?

Paul Mapacpac's picture

Hi Jason,
We are currently running SEP testing and enabled all of the features, we are not encountering this errors.

Is this only affecting 1 client? it seems that the COH32.exe is corrupted, try to reinstall.

Lissome's picture

My guess it is expected behaviuor. COH32.exe related to Proactive Threat Protection.  It is not continous process, it is just start once in while. So you can set scan frequency for PTP like once in 3 hours.
For servers there is no problem at all because PTP do not work on Windows Server platform and it is not recomended to include PTP into installation packet for servers.