Endpoint Protection

 View Only

  • 1.  SEP12.1 RU1 ccsvchst high cpu

    Posted Feb 28, 2012 07:47 PM
      |   view attached

    Hey All,

    Have a client running Windows XP Sp3 with SEP12.1 Ru1 installed.

    ccsvchst high cpu usage 20-50% in system process

    Have ms kb 2616676 v2 installed along with hotfix 959658 which was meant to fix issue as per symantec article but hasn't.

    http://www.symantec.com/business/support/index?page=content&id=TECH170756

    How to fix or diagnose further.



  • 2.  RE: SEP12.1 RU1 ccsvchst high cpu

    Posted Feb 28, 2012 09:49 PM

    Hi,

     

    Problem

    Immediately after downloading and applying definitions, either from the Symantec Endpoint Protection Manager (SEPM) or through LiveUpdate, the CPU usage of the Symantec Endpoint Protection (SEP) 12.1 client becomes very high for ten to fifteen minutes. ccSvcHst.exe is reported as being the process responsible for the high CPU usage.


     

    Environment

    Observed on Windows XP SP3 using the SEP 12.1 RTM build on systems with MS KB 2616676 also installed.


     

    Cause

    This problem appears to be caused by a memory leak issue that occurs with MS KB 2616676 installed. This may result in unexpected behavior from ccScvHst.exe.


     

    Solution

    It has been reported to Symantec that applying Microsoft Hotfix KB 959658 to impacted systems resolves this issue. This hotfix is designed to address issues caused by MS KB 26166763.

    For information on obtaining and installing this Hotfix, please visit the following link: http://support.microsoft.com/kb/959658

     

    Refer KB http://www.symantec.com/docs/TECH170756

     

    After this, if possible then please try Re-installing the SEP on the machine & also check if any active scans are running on the system.

     

    Hope this helps you!!



  • 3.  RE: SEP12.1 RU1 ccsvchst high cpu

    Posted Feb 28, 2012 09:51 PM

    I have already installed 959658 and machine is not fixed, so this is not relevant. There is no active scans running either. I don't want to reinstall client as it occurs on a few and want a proper fix. THis is RU1 as well mind you.

    "Have ms kb 2616676 v2 installed along with hotfix 959658 which was meant to fix issue as per symantec article but hasn't."



  • 4.  RE: SEP12.1 RU1 ccsvchst high cpu

    Posted Feb 28, 2012 10:32 PM

    Hi,

    Can you please catch the ccsvchst process activity by process Explorer, this will give you more idea what exactly causing to use high CPU for ccsvchst.