To investigate, disable the features of the product, one at a time. The next step is to determine exactly which subcomponent of the real-time antimalware scanner is causing the symptom. Progressively disable components in McAfee Enterprise software to locate the specific component involved in the resource use issue If the ZZZ test doesn’t alleviate the high CPU utilization, the scan engine is efficiently scanning all files that are sent to it. But, you can substitute these steps for any given performance, system stability, or application stability symptom. In the following steps, the article directs configuration changes while monitoring how each change affects CPU activity. But, the troubleshooting covered by this article is relevant to any performance, system stability, or application stability issue that might occur. NOTE: High CPU utilization is the most common performance symptom that users experience. Only general remediation steps are provided. To identify the cause of high CPU use by the McAfee Enterprise real-time antimalware scanner for Endpoint Security, MOVE AV Agentless, MOVE AVMulti-platform, or VirusScan Enterprise, use the diagnostic procedure in this article. Conflicts of this type must be resolved to alleviate the issues. In these cases, a conflict might exist between the real-time antimalware scanner and either a third-party program or the system itself. Sometimes, performance issues can't be alleviated by changing the configuration. Tuning is conducted by measuring performance for the default or existing configuration, and then modifying the configuration to improve performance and increase security. Administrators are expected to tune each instance of the real-time antimalware scanner to the needs of the specific environment. So, a real-time antimalware scanner is expected to compound existing CPU utilization, but isn’t the driving force behind system resource consumption.īecause McAfee Enterprise software exists in a diverse range of environments, it’s impossible to provide a default configuration that meets the needed balance between protection and performance in all possible environments. If the system is idle, the scanner is idle. The real-time antimalware scanner CPU use is proportional to the amount of disk activity that occurs on the system. If the file is malicious, an action is taken on it. If the file isn’t malicious, it’s returned to the process that requested it. The scan engine then returns a decision about whether the file is malicious.

This component intercepts the file and delivers it to the scan engine. All McAfee real-time antimalware scanners operate by inserting a component that is used to monitor all disk access requests made by any process running in memory.

Avast taking too much cpu