7.0.1407 - File System Shield activity & FSS exclusions

The file system shield activity has greatly increased in the final release build as has been shown in some other posts. Currently on my system 19118/0 files scanned and my system has never had this kind of activity in the FSS. Many posts make this figure look positively low, with over 57,000 scans.

I recently noticed that the FSS is constantly scanning a file winpatrol.exe, now this should have been added to the Transient cache after the first scan of this file. Having excluded that file from scanning in the FSS exclusions, I’m now noticing many other such repetitive scans of files on my system

So that file shouldn’t be scanned again unless you reboot or have a VPS update or the file changes. That file was clearly not being added to the Transient cache.

Whilst compiling this post and doing some checking of my settings, the FSS activity has climbed to 19890/0, I also added an exclusion (full path) for another file (C:\Program Files\Agnitum\Outpost Firewall Pro\op_mon.exe) being constantly scanned yet that even after exclusion is being scanned.

So it would appear that there is also something wrong with the FSS exclusions

EDIT added another exclusion C:\Program Files\FireTrust\MailWasher2010\MailWasherPro.exe and that one seems to have taken.

The activity is now up at 21223/0 and it appears to be cycling through .exe and dll files also javascript session store files, even though they too are excluded.

The transient cache has indeed changed little bit because of the changes in streaming updates and filerep.
It looks like some process is constantly touching these files on your system.
Can you try e.g. ProcMon to find out who it is?

Thanks
V;l

@ Vlk

I am in the same situacion. Avast! 7 sticks with one file over and over. Avast! does check other files while you use them but it returns to the same file again afterward. If I add the file, HPQste08.EXe in this case, to the exclusions or stop the process, Avast! just picks another and stay with it. I have stopped or added about 5 files and Avast! just picks another.

I will see what it is. Report back later.

Mine shows 7181 scans in the last 24 hours. What has drastically increased is the Script Shield activity which is showing 27,769 scanned scripts in the last 24 hours.

Well essentially like the transient cache, nothing has changed on my XP Pro system either.

Even with the streaming updates, which aren’t that frequent plus I don’t have an entry in defs for a stream today at all, the UI Updates shows the last stream update as yesterday, so that shouldn’t trigger a Transient cache reset. So why the constant cycling through files.

So what am I looking at in the ProcMon ?

David, since your last post was less than an hour ago, I presume you’re still having this problem?

It must vary considerably from one user’s system to another … I did get the same thing with repeated scanning of FirewallUI.exe, as I’d noted in another thread somewhere (the main “Final released” one, maybe?), but adding the PCTools folder to my File Shield exclusions (not the global exclusions, under Settings) cleared that up nicely yesterday and – so far, at least – avast hasn’t found another file “worthy” of the same attention. The tooltray icon remains at rest unless something’s actually happening.

Between that, and the extremely useful tip of resetting ShowSetupOutro in the INI to get rid of that phoenix-like “finish installing” thing, I think I’ve finally got my avast back into normal running condition, plus of course the new features. Speaking of which, since the new auto-sandbox so far has too small a database to be of any use, and insists on terminating nearly anything I start, I’ve simply disabled that until it’s more functional, like the WebRep will hopefully become.

Well continues apace, but as far as being a problem goes it doesn’t really impact on my system performance, it is just that this never happened before and essentially with the Transient cache it shouldn’t happen.

Even with the streaming updates (of which I have had none today) does clear/reset the transient cache the file should be scanned once and not perpetually.

I have added a few exclusions, but that is shooting the messenger and not solving the problem (and there are a great many such files in this cycle), this simply shouldn’t happen.

The activity/files scanned count is currently on 28844/0.

I added WinPatrol to my Exclusions and it greatly reduced the number of events in FSS on my XP Pro system.

I see no problem with WinPatrol in FSS on my Windows 7 system.

Generally not a problem on my win7 netbook, but that doesn’t get as much use is on standby most of the time.

But the XP Pro system the stats activity looks like a profile of the Alps. Scanned count now at 33,673/0

After a clean install, all remain the same ( sound like a song ). It does not matter if I exclude the file, Avast! just get stuck with another. After 3 hours with the new install, I have in FSS about 130.000 files scanned. This is unbelievable.

Beside the automatic vps update when installing I have not got any more updates, vps 120224-1, and I have this disturbing " Connection not stablished " sign that I have no idea what it means.

@ Vlk

Like davidR what am I looking at when using Process Monitor ?

The Connection not established related to the cloud services for the streaming updates. Your normal VPS updates would be unaffected by this as far as I’m aware.

If there are no streaming updates that shouldn’t trigger a transient cache reset, as I mentioned before; so there would be little reason then for the subsequent scans of an individual file. Even if it was working and reset the transient cache it should only scan a file once after that.

So even if I knew what Vlk asked me to monitor, essentially it makes no difference, if there was something touching the file/s surely it should be scanned once and no more.

One of the culprits in this is usually the old MS Index Service, but I disabled that many years ago as it is a pain in the rear.

Well I got my first automatic vps update ( 120224-2 ). My FSS is reaching 200 thou by now.

Ok thank you. I wanted to be sure. Will wait for a streaming update and see if the con is stablished, and as I said i got my first VPS.

That is the million dollar, in your case pounds or euros, question. What is making FSS to behave like that ?

I know you do not because you asked Vlk what to look for. I was also asking him what to look for . If something is touching the files and they should be scanned once anyway then why is/are it/they being scanned again and again ? Well I suppose that is the question…

The same problem here.

What OS are you using, as both of us are using XP Pro ?

Though it does seem your is somewhat less active, mine now at 48,014/0

Not sure if this is too off-topic as I don’t have enough information to back it up yet, but I too appear to experiencing this on all my Windows XP systems (32-bit) (unsure if Windows 7 x64 one is affected yet).

I noticed the AvastSvc.exe process getting high in memory consumption & cpu usage during a routine Malwarebytes Antimalware scan. It also sticks around after it’s done and may periodically pop-up in heavy usage again if something is opened. This hasn’t happened before the upgrade and appears to have made everything generally sluggish. Scan times for MBAM increased about 40%-50% longer (as well as a 30-40% longer avast quick scan time) [mind you these rigs are rather old].

I do also have filerep and streaming updates on, and have similarly seen a spike in File Shield scanned items (20,000 items higher than usual at the moment). Will keep a watch on any developments with this.

Just had a look, no problems here.

Sorry if you have already clarified this but during the “FSS constant scan” what’s the behavior of the tray icon? is it spinning?
I’m asking because I have to check my father’s laptop (XP Pro SP3).

I have the same problem on my WinXP Home SP3 Laptop. FSS scans the same file (the UI of my WLAN driver) again and again…

DJBone

I didn’t see any appreciably CPU activity or constant rotation of the avast tray icon (you might just see a single rotation for each blip). It is just a constant drip, drip, drip, as the scanned count constantly creeps up. Now as 13694/0 14037/0 whilst just posting this. My system has only been up for about 90 minutes.

After excluding a dozen processes or so from FSS and including them to Behavior shield:

C:\Archivos de programa\Creative\VoiceCenter\AndreaVC.exe
C:\Archivos de programa\Digital Line Detect\DLG.EXE
C:\Archivos de programa\HP\Digital Imaging\bin\hpqste08.exe
C:\Archivos de programa\Logitech\Logitech WebCam Software\LWS.exe
C:\Archivos de programa\Intel\Intel Matrix Storage Manager\IAANTMON.EXE
C:\Archivos de programa\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Archivos de programa\TrippLite\PowerAlert\console\pastatus.exe
C:\Archivos de programa\TrippLite\PowerAlert\engine\pal.exe
C:\Archivos de programa\UPHClean\uphclean.exe

C:\Archivos de programa\Archivos comunes\Creative Labs Shared\Service\CREATIVELICENSING.EXE
C:\Archivos de programa\Archivos comunes\LogiShrd\LQCVFX\COCIMANAGER.EXE
C:\Archivos de programa\Archivos comunes\LogiShrd\LVMVFM\LVPRCSRV.EXE

C:\Documents and Settings\Hernan Perez\Configuración local\Temp\clclean.0001.dir.0000
C:\Documents and Settings\Hernan Perez\Configuración local\Temp\clclean.0001
C:\Documents and Settings\Hernan Perez\Configuración local\Temp\clclean.0001.dir.0000~df394b.tmp
C:\Documents and Settings\Hernan Perez\Configuración local\Temp\clclean.0001.dir.0000~efe2.tmp

C:\WINDOWS\STSYSTRA.EXE

C:\WINDOWS\system32\CTMBHA.dll
C:\WINDOWS\SYSTEM32\CTSVCCDA.EXE
C:\WINDOWS\SYSTEM32\DLA\DLACTRLW.EXE
C:\WINDOWS\SYSTEM32\NVSVC32.EXE

I got stuck with

C:\Documents and Settings\Hernan \Local configuration\Temp\clclean.0001.dir.0000

Did not want to go away. However; This morning fooling around with the Clound Services and streaming updates, I disabled it rebooted and enabled it again and rebooted. Did not get connection stablished or the folder for the steaming updates in Avast! def file that I was expecting to accomplish with it, but I got FSS to work the right way ;D. Avast! icon is not spinning like crazy any more and last file scanned changes accordingly. Now I have to take back all the exclutions in FSS and see what happens.

@ Tetsou

Yes, The icon is constantly spinning if the comp is at idle. You can also check your CPU for spikes. Mine was all the time jumpping to 40% o 60% when normally it did not pass 15%. Also take a look at your FSS. See my screenshots. One is FSS working like crazy the other is FSS working like it is supposed to. Guess which is which ?

@ DavidR

I had some cpu spikes as explain above