High CPU spikes shown for McScript_InUse.exe during an incremental DAT update
Last Modified: 2023-08-14 10:31:11 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
High CPU spikes shown for McScript_InUse.exe during an incremental DAT update
Technical Articles ID:
KB66044
Last Modified: 2023-08-14 10:31:11 Etc/GMT Environment
McAfee Agent (MA) 5.x
Problem
High CPU shown against You observe CPU spikes during incremental DAT updates. IMPORTANT: This issue occurs most often on computers with older hardware or single processor systems. Cause
When incremental '.DAT' files are needed to update DATs on a client, the amount of processing needed to decompress, decrypt, combine, and apply them can increase. Although using incremental DATs can help reduce network bandwidth, merging the files on the local computer and applying them consumes more CPU resources during the update. If CPU resources are available, This issue is more noticeable on systems with slower processors and less RAM. It also depends on the number of incremental files needed during a given update. It's important to note that minimum system requirements might not allow for optimal performance in all environments. For a full list of system requirements, supported operating systems, and processors, see the McAfee Agent Product Guide. For product documents, go to the Product Documentation portal.
Solution
As malware threats have continued to rise, detections for those threats are added to the DAT files. As a result, the DAT file size increases. With this increase, the system resources needed to merge and process multiple files has also increased. We're researching options to improve performance of the DAT update process, while continuing to provide the highest levels of protection. Workaround 1
Use the Windows registry to lower the priority of the working threads for the McAfee Framework service. CAUTION: This article contains information about opening or modifying the registry.
Workaround 2
To reduce the CPU reported against
Affected ProductsLanguages:This article is available in the following languages: |
|