Jump to content


Photo
- - - - -

System Nt Kernel


  • Please log in to reply
16 replies to this topic

#1 drumut

drumut

    Member

  • Members
  • 325 Posts:

Posted 27 December 2009 - 00:38

Hello,

I see that when i use dr.web there is a application called SYSTEM and it takes 40-50% cpu usage. After i uninstall dr.web it disappears. It really annoy me. Do you any idea is there any relation or how can i handle this?
OS : Debian Sid , all i have all i need!

#2 Borka

Borka

    Забанен за флуд

  • Members
  • 19,512 Posts:

Posted 27 December 2009 - 00:54

I see that when i use dr.web there is a application called SYSTEM and it takes 40-50% cpu usage. After i uninstall dr.web it disappears. It really annoy me. Do you any idea is there any relation or how can i handle this?

Run ProcessExplorer and look which thread takes CPU time.
С уважением,
Борис А. Чертенко aka Borka.

#3 drumut

drumut

    Member

  • Members
  • 325 Posts:

Posted 27 December 2009 - 02:23

I already did that before i post this message, there is nothing about system.exe in there. when i install dr.web system.exe uses high cpu. but when i uninstall dr.web it nearly never shows up. so can i ask you does dr.web use this kind of system component of windows?
OS : Debian Sid , all i have all i need!

#4 Borka

Borka

    Забанен за флуд

  • Members
  • 19,512 Posts:

Posted 27 December 2009 - 02:33

I already did that before i post this message, there is nothing about system.exe in there. Why i write it down here, after uninstalling dr.web it disappears and when i reinstall it, it appears again. I didn't get it.

What system.exe ? :) "System" is a pseudoprocess which represents kernel itself and kernel/filesystem drivers. Run ProcessExplorer, select "System", right mouse button -> Properties -> Threads. Which thread takes CPU time?
С уважением,
Борис А. Чертенко aka Borka.

#5 drumut

drumut

    Member

  • Members
  • 325 Posts:

Posted 27 December 2009 - 02:55

There are 107 threads and mostly ntkrnlpa.exe :)
OS : Debian Sid , all i have all i need!

#6 Borka

Borka

    Забанен за флуд

  • Members
  • 19,512 Posts:

Posted 27 December 2009 - 02:57

There are 107 threads and mostly ntkrnlpa.exe :)

And which thread eats CPU?
С уважением,
Борис А. Чертенко aka Borka.

#7 drumut

drumut

    Member

  • Members
  • 325 Posts:

Posted 27 December 2009 - 03:09

spider.sys

Does drweb support intel atom processors? May be it is the reason.

I currently use prevx, it's self protection is set to minimum and also i excluded both applications each other.

Fan speed makes me crazzy :)
OS : Debian Sid , all i have all i need!

#8 Borka

Borka

    Забанен за флуд

  • Members
  • 19,512 Posts:

Posted 27 December 2009 - 13:51

spider.sys

Please attach configuration file C:\Program Files\DrWeb\drweb32.ini and detailed log C:\Program Files\DrWeb\spidergnt.log
С уважением,
Борис А. Чертенко aka Borka.

#9 drumut

drumut

    Member

  • Members
  • 325 Posts:

Posted 27 December 2009 - 22:53

The problem persists.

Attached Files


OS : Debian Sid , all i have all i need!

#10 pig

pig

    Бредогенератор

  • Helpers
  • 10,858 Posts:

Posted 27 December 2009 - 23:15

The log attached seems not to be a detailed one.
Почтовый сервер Eserv тоже работает с Dr.Web

#11 drumut

drumut

    Member

  • Members
  • 325 Posts:

Posted 27 December 2009 - 23:35

I can't add more on that log because the only information i get is that for now.
OS : Debian Sid , all i have all i need!

#12 pig

pig

    Бредогенератор

  • Helpers
  • 10,858 Posts:

Posted 27 December 2009 - 23:37

See Settings - Log
Почтовый сервер Eserv тоже работает с Dr.Web

#13 drumut

drumut

    Member

  • Members
  • 325 Posts:

Posted 27 December 2009 - 23:43

I also add scanned files into log, lets wait a little bit.
OS : Debian Sid , all i have all i need!

#14 drumut

drumut

    Member

  • Members
  • 325 Posts:

Posted 28 December 2009 - 00:04

There are a lot of process in 5 minutes  :)

Attached Files


OS : Debian Sid , all i have all i need!

#15 Borka

Borka

    Забанен за флуд

  • Members
  • 19,512 Posts:

Posted 28 December 2009 - 00:39

Try to swich off "Enhanced protection mode".
С уважением,
Борис А. Чертенко aka Borka.

#16 drumut

drumut

    Member

  • Members
  • 325 Posts:

Posted 28 December 2009 - 02:01

That may be the solution, let me run my comp. with your suggestion little bit then i will return the thread.
OS : Debian Sid , all i have all i need!

#17 drumut

drumut

    Member

  • Members
  • 325 Posts:

Posted 28 December 2009 - 13:21

That was the solution what i was looking for Borka, there is not anymore high CPU usage by system or spider.sys thread in system. See what i miss

By default, the enhanced protection mode is enabled. In this mode SpIDer Guard immediately checks all files, the scanning of which is specified in the program’s settings, and all other opened files are put on the queue for check (files opened for reading in the Smart and Create and write files modes). With computer resources available, the Guard will also check these files


After i finish a complete scan i enabled Smart. So i don't believe that i miss a huge security option, am i right?

Expacially for netbooks this setting i mean enhanced mode" should be disabled.

I encounterd a problem and i digg it but i don't believe every users would digg, so i suggest you to disable enhanced mode default :) to not allow other users who dont like investing much to give up using dr.web even they don't know how to solve it.
OS : Debian Sid , all i have all i need!


1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users