AIS firewall high CPU load

have no idea why; it happened suddenly when attempting to open some MS online help content (Windows)…content wasn’t displayed, while the CPU started to reach peaks (usage). I saw in task manager that Avast firewall service was the culprit. Attempted to stop the service but that was a no go. I had to reboot to stop that.

Have the same problem, adn it just started few hours ago.
It began with couple of blue screen, and then change my windows layout to classic layout.
At first I thought maybe it is a virus. my scan revealed nothing.
And now I got some memory hazard dialog about a service that needs to shutdown (memory overload). it was “afwServ.exe”.
It is somehow connected to the firewall (the firewall services stoppedwhen I shut it down, and when I started the services, the process came up again)

Any advises what it could be, and what to do?

it just happened again, high CPU load on firewall service. Strangely I can interrupt the service but the process keeps running and the only way out to stop this is to reboot. It happened this time in the same conditions: when launching Windows help panel, and it’s attempting to connect to “online help”…and fails to do so.

OK I can only get access to Windows online help when deactivating the firewall (from AIS). Also, something strange happened, when I deactivated it , instead of getting the “UAC like” avast prompt to confirm, I got an actual Windows UAC prompt ;D

I think the problem is that the needed rule to allow the online help to connect is that the rule for it takes ages to happen. It takes several attempts until this rule comes out, and then all is OK.

just had to reboot again a few minutes ago, had some high CPU load (between 50 and 100%) from AfwServ.exe while just browsing in Chrome and having a few explorer windows opened…if it happens one more time I will have to deactivate this firewall for good.

It would be very useful if you create a memory dump of the afwServ.exe process while the problem is simulated.

Thanks
Vlk

I don’t mind, but I have no way to reproduce it. I got to wait until it happens again…the only thing I can try is remove the rule for Microsoft Online help, and expect it will happen again when I hit F1…I’ll post back in a minute.

OK I removed the MS Online help rule, when launching it I get no rule created again by the firewall, and I get no Online help content either… (it’s blocked, but nothing in the fw log showing it and no alert) but no CPU load from the firewall this time…can’t reproduce anything right now…

after a reboot, and also a manual stop/restart of the firewall service (so I don’t know if the reboot was enough), I finally get a rule recreated for MS online help, and the content is loaded. So I guess I’ll just have to wait until the fw service generate some high CPU load again…nothing more I can tell apart from the fact that it’s happened three times now.

Hi, in order to be able to create the memory dump you’ll also have to disable the Self Defense feature, but I suppose you’ve already done that.

Hi,

I can’t reproduce the issue anyway…just got to wait until it happens again. Do you mean a full kernel dump by crashing the system purposely when it happens or just a dump file from the process in task manager? no, I haven’t disabled the self-defense module, didn’t think that was needed for the dump, but now that you mention it OK…again, I cannot reproduce the issue purposely…

I hope it’s OK to jump in here, just registered as a user. :slight_smile:

I’ve been getting the same problem for a while also. The processor goes off on it’s own and seems to be working very hard (high load) and holds that status (full throttle type of thing). It occurs usually after fairly heavy browsing using IE but not always, just sometimes. It has also occurred when using a group of other open programs such as a scanner application along with a PDF creator software. It almost always occurs upon closing one of the applications (this is the case with IE also).

The CPU becomes very active and stays that way indefinitely. An error box usually pops up also, as follows:

afwserv.exe Application Error
The instruction at “0x6710dct7” referenced memory at “0x60b4497c”. The memory could not be “read”.
Click on OK to terminate program.
Click on CANCEL to debug program.

(note that the memory locations vary each time. I have also had the memory hardware checked and it’s 100% OK). Choosing either option sometimes works sometimes doesn’t but always turns firewall off. Need to turn PC off and reboot to fix, usually “hangs” for a few minutes before it moves to the “windows is saving your settings” screen.

Hi guys,

I have found a problem in afwServ that can be causing these errors. It will be fixed in the next update.

Chrismo, the address 0x6710dct7 has a typo - “t” is not a part of any hexadecimal number. Just to verify, that it is indeed hitting the same code part, if it reappears, could you post the correct message?

Thanks a lot,
PS: if anyone has a memory dump, (“C:\Documents and Settings\All Users\Application Data\Alwil Software\avast5\log\unpXXXX.mdmp” or for Windows Vista/7: “C:\ProgramData\Alwil Software\Avast5\log\unpXXX.tmp.mdmp” ), please post or upload it here.

Thanks.
Lukas.

OK good to hear thanks :wink: will the list or falsely supposed tens of blocked connections, stop appearing in the firewall log too?

also: off topic here, but since I know you’re watching the thread ;D >>> absolutely needed, the ability to reinstall the firewall if it was removed for any reason. Every time I attempted to re-add it to AIS, it was a complete failure. The Firewall service doesn’t even exist, there’s just a UI that of course cannot start, and the only solution is to uninstall/reinstall (“repair” doesn’t repair that).

Same problem and complety sure is afwServ.exe, checked the processes monitor and take 50% to 100% of the CPU.

Happens in my Toshiba Qosmio 4G-Vista Pro and in a deskop intel P35 with 4G-XP Pro Sp3.

Tried to stop firewall service but it refuses to stop.

My Avast is not free, it´s Avast Internet Security version 5.0.507. DB 100427-1, and stupid of me, paid for two years subscription…

Unfortunatly I paid for Avast. Left McAfee and now thinking of uninstall and go to another and more stable AV.

Lost money. Easy money. Isn´t it? I´m really frustrated.

Tried to stop firewall service but it refuses to stop

yeah as said that’s the main subsequent problem when it happens: you can’t stop the service. It does appear as stopped in computer management but the corresponding process keeps running.

Go into safe mode and disable the service then restart. That´s the only way I found to “recover” my pcs. I used them for work not just for pleasure.

not needed here, I just reboot and that’s fine…adding that in normal conditions, where there’s no unusual CPU load, the firewall can be disabled (unloaded) easily if needed.