CPU USAGE GOES TO 100% with new 2.4 [Resolved in version 3]

[Guest]

[Soyabeaner]

I performed a clean re-install not the updater with the auto not manual option.  So I'm not sure that will help the others, but it's still worth a try.

I've always wondered if CFP is analyzing and recording in the component monitor.  e.g. There are a lot of dlls that I haven't even opened/used.  It's like CFP is gradually analyzing my pc in the background and that once it's done, no more cpu usage?

[Soyabeaner]

Ok.  That didn't take too long.  About 15 minutes later.  It may be coincidence, but it happened when I was playing a video with WMP 10.  After closing WMP the problem persists.  Although cmdagent.exe's CPU peak at 55% isn't as high as it was yesterday (maybe I have less programs opened?).

Update: I closed uTorrent.  The only application with internet connections is Opera as I'm typing.  I have 2 tabs opened.  The other one is for testing the cpu usage.  Now its peak is higher .

[AOwL]

Thank's for your info soyabeaner.
When you have closed uTorrent, does it create log entries after you have closed it?
There might still be others trying to connect even after you have closed it?
I was just thinking if the log created the high cpu.

Do you have any blocks for IGMP?

[Soyabeaner]

I'm one of the few, if not, the only user who disables logs.  It's definitely not about ICMP and their unreachables if that's what you're thinking because I allowed those (except for ICMP = UNREACHABLE --> This one I can never figure out without allowing an all ICMP in rule).  Let me try again.

Also, I have never seen IGMP because I don't have multicasting or whatever you call those programs.

[Soyabeaner]

I started uTorrent with log enabled.  Downloading a torrent for a short while.  Then closed it without any strange logs.  Finally, I tested the other tab by refreshing the same site and the spikes are still there.

Just to clarify: I don't know about other users, but the spikes are only momentarily for me when loading a site with lots of items.  They are gone once the site is done loading.

[poutine]

  Well i ghosted my sys that i backed up two days ago back on beforei installed CPF,   lets hope it gets sorted soon. Interesting but even without it on here,  loading webpages does push the CPU way up momentarily to 88%, hmmm.  I dont know, love the CPF but ill wait a few days i think this time.

[jeanluk]

i have the spikes too (up to 100%)
either its that or full 100% cpu

its so annoying i had to uninstall comodo...and let me tell you that it really sucks to do that
i really had no choice at all.

now maybe i will do a fresh install when i find some time
but its a pain in the ass and my friend did fresh install and had this problem too...

one thing for sure 2.3 =>perfect 2.4 => instant problems (it was so bad i thought about getting a virus or worm)
i shutted down comodo and voila ,pc is back!

(ps: everything is scanned :nothing ,no virus,no malware,again it happened since 2.4 upgrade)

[Soyabeaner]

Make sure it's cmdagent.exe process that has that high cpu and not something else like the browser.  I know that Opera 9.10 I'm using has a problem, but it's always cmdagent that has the highest usage.

[kail]

I'll do a Merge.

[kail]

All

Sorry about the URL changing.. I needed to perform a merge of 2 topics. Thanks.

[poutine]

i have the spikes too (up to 100%)
either its that or full 100% cpu

its so annoying i had to uninstall comodo...and let me tell you that it really sucks to do that
i really had no choice at all.

now maybe i will do a fresh install when i find some time
but its a pain in the ass and my friend did fresh install and had this problem too...

one thing for sure 2.3 =>perfect 2.4 => instant problems (it was so bad i thought about getting a virus or worm)
i shutted down comodo and voila ,pc is back!

(ps: everything is scanned :nothing ,no virus,no malware,again it happened since 2.4 upgrade)

Thats the beauty of  imaging your drive, i did mine before CPF, 20 minutes later im back online and 100% OK. 

[j8ee]

Don't know if this will help anybody. 

I had cpu usage spikes every 2 seconds.  I noticed ,in the logs, that it would block a series of ICMP packets(fragmented or faked) every 2 seconds.  It is even worse when I have bittorrent running.  Cpu usage would spike up to 50% and playing games would be a nightmare with all that lagging. 

I didn't feel like allowing all ICMP packets, so I just went to the log to disable logging ICMP.  Now there are no more cpu spikes.  To do that, go to logs, then right-click, mouse over "log events from", and uncheck "Network Monitor".

I don't know why I get ICMP blocks all the time.  Probably something to do with the University network scans 

This is exactly what I had to do too. I attach a screenshot of what it looks like without disabling logging from the network monitor. I get several reports per second of outgoing and incoming icmp packets that are blocked ("port unreachable"), dunno what they are or where they come from. I have the default icmp settings in the network control rules config.

[AOwL]

This is exactly what I had to do too. I attach a screenshot of what it looks like without disabling logging from the network monitor. I get several reports per second of outgoing and incoming icmp packets that are blocked ("port unreachable"), dunno what they are or where they come from. I have the default icmp settings in the network control rules config.

You can also try to block all ICMP below the default ICMP rules, but ABOVE the default block rule. Do NOT check the "create alerts..." option...
I can look like this.
Action : Block
Protocol : ICMP
Direction : In/out
Source IP : Any
Destination IP : Any
ICMP Details : Any

This way, ICMP will be blocked BEFORE the default block rule that has the log option ON. Now you should be able to put on the log for network monitor again in the log.

[djet]

Couldn't reproduce this with a clean XPSP2 installation under VMWare. Gonna make some more tests..

[djet]

Eureka! AppMon didn't get friendly with Kaspersky/AOL AntiVirus software. ProcMon registered thousands of requests from the cmdagent.exe to Kaspersky's database located in C:\WINDOWS\SYSTEM32\config\fidbox.*. After uninstalling AVS CPU usage is tiny.

Next gonna test it with Avira AntiVir PE Classic.

[Tags:]