Endpoint Protection

 View Only
  • 1.  Endpoint Protection high CPU utilization opening Excel 2003

    Posted Jul 25, 2011 05:00 PM

    Very slow performance opening Excel spreadsheet after upgrade to SEP v11 (from v10).

     

    This is similar to the locked thread (https://www-secure.symantec.com/connect/forums/excel-2007-sow-after-upgrading-ru6a) for Excel 2007.

    Windows XP SP3

    Office 2003

    Excel 2003

    The Excel security option for macros is Prompt. This might be a clue to what is going on.

     

    In Windows Task Manager I see Smc.exe high utilization (25-35%) when opening spreadsheet file, EXCEL.EXE also doing 5-6% CPU and small number of I/Os. The workstation is otherwise idle. 

    Endpoint Protection auto protect scan statistics show EXCEL.EXE.123456.pf upon first openin the spreadsheet, then several other files, all seem to be related (Program Files\Symantec Antivirus\SerState.dat, or files in the SYSTEM VOLUME INFORMATION system folder).

     

    Symantec Endpoint Protection

    Help > About

    Version 11.0.6300.803



  • 2.  RE: Endpoint Protection high CPU utilization opening Excel 2003

    Posted Jul 25, 2011 05:02 PM

    Any suggestions would be appreciated.



  • 3.  RE: Endpoint Protection high CPU utilization opening Excel 2003

    Posted Jul 25, 2011 05:19 PM

    After waiting 30 minutes for the spreadsheet to open, I set Tools > Macro > Security from "Medium" (Prompt) to "Low" (not recommended). This did not speed up opening a spreadsheet.

    I can open the spreadsheet without a performance problem from other computers without SEP v11.



  • 4.  RE: Endpoint Protection high CPU utilization opening Excel 2003

    Broadcom Employee
    Posted Jul 26, 2011 06:18 AM

     

    Hi,
     
    Try doing some changes in Antivirus & Antispyware policies as per below 
     
    Go to Policies --> Antivirus and Antispyware policies ---> Edit assigned policy --> Click File system auto protect --> Click Advanced scanning and monitoring --> Select scan when a file is modified and uncheck scan when a file is backed up.
     
    Screenshot is attached for reference.
     


  • 5.  RE: Endpoint Protection high CPU utilization opening Excel 2003
    Best Answer

    Posted Jul 26, 2011 08:35 AM

    also check out the microsoft fix for the recent microsoft file validation patch, affects office 2003 products.  you can change it.  fixed the problem for me.

     



  • 6.  RE: Endpoint Protection high CPU utilization opening Excel 2003

    Posted Jul 26, 2011 09:21 AM

    Thanks for replying Robert, you hit the nail on the head! It was the new office file validation add-in. Microsoft even has a KB article explaining that the add-in will cause Office 2003 to load very slowly for any file opened from a network share.  (Personally I wonder if that is a tactic to "encourage" people to upgrade to Office 2007/2010).

    http://support.microsoft.com/kb/2570623

    http://www.microsoft.com/technet/security/advisory/2501584.mspx

    http://support.microsoft.com/kb/2501584

    http://technet.microsoft.com/en-us/library/gg985445(office.12).aspx?ppud=4

    I fixed my issue by removing this add-in. Our organization "drinks the Microsoft Kool-Aid", so most of our PCs are using Office 2007. It just a few backwards-compatible machines kept running Office 2003 that have the issue.

    Apologies to Symantec for blaming Endpoint Protection. (But you gotta admit, seeing 25% CPU utilization while Excel was hung in limbo validating a large spreadsheet file from a network location did look mighty suspicious.)



  • 7.  RE: Endpoint Protection high CPU utilization opening Excel 2003

    Posted Jul 26, 2011 09:32 AM

    You should mark Robert's answer as the solution.



  • 8.  RE: Endpoint Protection high CPU utilization opening Excel 2003

    Posted Jul 26, 2011 09:39 AM

    I did the first time around, replied, it reset when I saved. I just tried again.