Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

sqlservr.exe process increase CPU when antivirus is enabled Expand / Collapse
Author
Message
Posted Monday, February 1, 2010 10:34 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Thursday, March 25, 2010 10:29 AM
Points: 2, Visits: 9
Hi,
This is the first time I add a topic here, but I recieve the SQLserverCentral Newsletter every week and find some topics very interesting. Thanks.

So I have the following issue on a SQL 2000 server protected by McAfee antivirus.
When McAfee is disabled, sqlserver.exe process uses less than 10% of the CPU
When I enabled McAfee, sqlserver.exe process jumps to about 60% of the CPU
It slows down the t-sql queries and some sql clients get timeout that affect client applications.

I opened a ticket to McAfee, but get no answer expected to install the last version. That is done but the issue remains.

Here are the McAfee exclusions:
BAK, LDF, MDF,NDF,TRN files
C:\Program Files\CA\
C:\Program Files\Microsoft SQL Server\MSSQL\BACKUP and subfolders
C:\Program Files\Microsoft SQL Server\MSSQL\Binn and subfolders
C:\Program Files\Microsoft SQL Server\MSSQL\Data and subfolders
C:\Program Files\Microsoft SQL Server\MSSQL\FTData and subfolders
D:\BACKUP and subfolders
D:\MSLSQL\Data and subfolders
D:\Tracability Manager and subfolders (databases are located in this directory)

Here are the McAfee Low Risk Process:
Aexauditpls.exe
Aexnsclient.exe
Aexnsclienttransport.exe
Aexnswdusr.exe
Agentsvr (SQL Agent)
Sqlservr.exe
UnivAgent.exe

Configuration
Windows Server 2003 Standard Edition SP2 – intel Xeon 2 CPU 3,06GHz 4GO RAM (3GB swith)
SQL 2000 SP4
McAfee VirusScan Entreprise 8.7.0i

If someone has an idea ??

Pierre
Post #857392
Posted Monday, February 1, 2010 3:59 PM
Say Hey Kid

Say Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey Kid

Group: General Forum Members
Last Login: Today @ 11:07 AM
Points: 710, Visits: 1,452
Not sure. I know we used to see a lot of contention of resources and file handles with Symantec, but I believe there were some exclusions that were left out.

What happens if you try and exclude the entire c:\program files\Microsoft SQL Server directory?

Are there any database files that are not in the default locations that McAfee could be trying to scan?


Joie Andrew
"Since 1982"
Post #857621
Posted Tuesday, February 2, 2010 9:18 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Thursday, March 25, 2010 10:29 AM
Points: 2, Visits: 9
Thanks for your answer Joie,
I tried to exclude all drives of the server. I saw that McAfee didn't scan anything and the CPU usage of sqlservr.exe increased up to 60%... It seems that the issue is not related to scanning operations.

Pierre
Post #858047
Posted Tuesday, February 2, 2010 9:56 AM


SSCarpal Tunnel

SSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal TunnelSSCarpal Tunnel

Group: General Forum Members
Last Login: Today @ 7:22 AM
Points: 4,654, Visits: 11,115
My two cents: I wouldn't install an antivirus on a production server. I would rather perform a remote scan from another machine.


--
Gianluca Sartori

How to post T-SQL questions
spaghettidba.com
@spaghettidba
Post #858075
Posted Tuesday, February 2, 2010 12:55 PM
Say Hey Kid

Say Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey Kid

Group: General Forum Members
Last Login: Today @ 11:07 AM
Points: 710, Visits: 1,452
That is an option, but I know a lot of environments will not allow that because that negates any possibility of real-time protection.

Joie Andrew
"Since 1982"
Post #858216
Posted Friday, April 5, 2013 9:45 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Friday, April 5, 2013 9:43 AM
Points: 1, Visits: 0
This article may be of assistance to you.

http://sysadminops.blogspot.com/2011/10/how-to-exclude-processes-from-virus.html
Post #1439314
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse