Endpoint Protection

 View Only

  • 1.  COH32.exe CPU usage

    Posted Nov 10, 2007 10:22 AM
    I have an issue withthe process COH32.exe. It starts and closes regularly, and uses up 100% CPU when it runs. I can hear the fan on the machine speed up and I think "oh, there's COH32 running again". Is this a part of Symantec's Bloodhound detection or the Proactive Protection? If so, how can I tame it/disable it?


  • 2.  RE: COH32.exe CPU usage

    Posted Nov 12, 2007 09:04 AM
    Searinox,
     
    What you are seeing there is indeed the proactive threat protection.
     
    I think it runs every 15 minutes by default, but you can change that.
     
    If you want to do it for all your clients you just need to configure it in your Antivirus and Antispyware policy in your SEPM. There is a section called proactive threat scan where you can define when you want that scan to be run.
     
    You can find detailed information in the Administrator guide (chapter 37 Configuring proactive threat scans) in the Documentation folder in CD 1.
     
    paulorf


  • 3.  RE: COH32.exe CPU usage

    Posted Nov 12, 2007 10:13 AM
    Thank you for informing me how much the default is. I must also ask, is the default proactive scan set to run when new processes start up? I'm having mixed results with COH32. On the one hand it seems to throttle down if I have something else running and I'm not noticing the performance loss, can someone confirm me if the app is designed to behave like that?


  • 4.  RE: COH32.exe CPU usage

    Posted Mar 24, 2009 06:02 PM
    I waited for a while, noticing some of the earlier posts about the initial MP1 release.

    I downloaded and installed MP1 (MP1a, maybe?) from Fileconnect today.

    I have noticed, now for the first time- COH32.exe is through the roof.  Took up 99% CPU and 600 Megs of memory...!!

    Waited until it was done doing whatever it is it was doing and now I can work with my machine again.

    I am hoping this is an isloated incident on a single machine, mine, after the updates were pushed from the server...  Can anyone confirm this is a 1 time thing or am I going to have issues in production environment/servers and the rest of the network.

    Also, is there a fix for this?  Or an expected one?


  • 5.  RE: COH32.exe CPU usage

    Posted Mar 24, 2009 06:02 PM
    I waited for a while, noticing some of the earlier posts about the initial MP1 release.

    I downloaded and installed MP1 (MP1a, maybe?) from Fileconnect today.

    I have noticed, now for the first time- COH32.exe is through the roof.  Took up 99% CPU and 600 Megs of memory...!!

    Waited until it was done doing whatever it is it was doing and now I can work with my machine again.

    I am hoping this is an isloated incident on a single machine, mine, after the updates were pushed from the server...  Can anyone confirm this is a 1 time thing or am I going to have issues in production environment/servers and the rest of the network.

    Also, is there a fix for this?  Or an expected one?


  • 6.  RE: COH32.exe CPU usage

    Posted Mar 24, 2009 10:58 PM
    Hi Jason,
    We are currently running SEP testing and enabled all of the features, we are not encountering this errors.

    Is this only affecting 1 client? it seems that the COH32.exe is corrupted, try to reinstall.


  • 7.  RE: COH32.exe CPU usage

    Posted Mar 25, 2009 03:42 AM
    My guess it is expected behaviuor. COH32.exe related to Proactive Threat Protection.  It is not continous process, it is just start once in while. So you can set scan frequency for PTP like once in 3 hours.
    For servers there is no problem at all because PTP do not work on Windows Server platform and it is not recomended to include PTP into installation packet for servers.