Avast Overseer

Avast Overseer.exe is a pretty annoying process. On a powerful machine CPU 12th Gen Intel(R) Core™ i7-12700, RAM 16,0 GB, SSD, Windows 11 together with Avast service it can load the CPU to more than 15% daily for up to several tens of minutes. The overseer alone almost 10% and 280 Mb RAM. Neither disk nor network is active. The Avast icon itself pretends that nothing is happening

What it will do on a station that is not powerful I can not imagine

Overseer isn’t an essential component (Avast will disagree lol)

Disable Avast self protection. Delete overseer.exe and the sheduled task for it, and re-enable self protection. Avast will run just fine.

Thank you for the troubleshooting guide, but I would like to read Avast Support’s response

Hello,

thank you for reporting. It is definitely not expected nor acceptable behavior of Overseer. Overseer’s job is to ensure that the antivirus is working as expected. Usually, it runs well under a second; however, it could take longer when it performs a fix.

Would you be so kind and send logs so we can see if there are any obvious issues?
you can find a guide here https://support.avast.com/en-us/article/submit-support-file/#pc

thank you

Unfortunately, I have no idea how to create a ticket on the support portal (Technical support for a free Avast product), because the links cycle through the menu “Search for the answer in our Knowledge Base” and a phone contact and a link to the forum

Output Avast support tool File ID O11FP sent

thank you, Let me look into it

The question is how far back in time do you see in the posted analytics … the problem was occurring for about 1-2 weeks before I got burned out and tried the discussion forum.

If it occurs again … I’ll be ready

Not very far. We couldn’t see any issue with the AV nor Overseer besides some internet connections issues.
Are you saying it no longer happens? That would be good news,

thank you, keep us posted.

Output Avast support tool File ID DE202

Intel Core i7-12700, RAM 16,0 GB, SSD, Windows 11 - login as User

Analyst created after restarting the computer during increased CPU load … … Overseer this time “did not get angry” so much … but !!

EDIT: It takes more than 40 minutes with Overseer load 8-15% !! - I created another analytics File ID FK23K and XVJEY the cumulative CPU load is up to 40-60%

https://img42.rajce.idnes.cz/d4203/18/18372/18372711_60b6d9b54f7354114e4ff6ab299cb112/images/Beznzvu.jpg?ver=0


https://img42.rajce.idnes.cz/d4203/18/18372/18372711_60b6d9b54f7354114e4ff6ab299cb112/images/Beznzvu2.jpg?ver=0


https://img42.rajce.idnes.cz/d4203/18/18372/18372711_60b6d9b54f7354114e4ff6ab299cb112/images/Beznzvu3.jpg?ver=0


https://img42.rajce.idnes.cz/d4203/18/18372/18372711_60b6d9b54f7354114e4ff6ab299cb112/images/Beznzvu4.jpg?ver=0


https://img42.rajce.idnes.cz/d4203/18/18372/18372711_60b6d9b54f7354114e4ff6ab299cb112/images/Beznzvu5.jpg?ver=0

thanks for all the data!

I’m adding additional information randomly found during another activity … I don’t know how serious it is

PC 1 Windows 10 Home

Error: (03/09/2023 04:25:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: overseer.exe, verze: 1.0.465.0, časové razítko: 0x63b6c96b
Název chybujícího modulu: overseer.exe, verze: 1.0.465.0, časové razítko: 0x63b6c96b
Kód výjimky: 0xc0000005
Posun chyby: 0x00000000000264a5
ID chybujícího procesu: 0x19ec
Čas spuštění chybující aplikace: 0x01d9529b403a90a7
Cesta k chybující aplikaci: C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe
Cesta k chybujícímu modulu: C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe
ID zprávy: fef360c0-7696-4085-b57f-87f20e878f6e
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

PC 2 Windows 11 Profesional

Error: (03/08/2023 08:26:15 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Název chybující aplikace: overseer.exe, verze: 1.0.465.0, časové razítko: 0x63b6c96b
Název chybujícího modulu: overseer.exe, verze: 1.0.465.0, časové razítko: 0x63b6c96b
Kód výjimky: 0xc0000005
Posun chyby: 0x000000000000f911
ID chybujícího procesu: 0x0x4f0c
Čas spuštění chybující aplikace: 0x0x1d951e47382ac70
Cesta k chybující aplikaci: C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe
Cesta k chybujícímu modulu: C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe
ID zprávy: a1837932-8a4e-42e2-86ee-0b8a044e89ea
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

excellent analysis, we can see it too. could you look in folder:

C:\Windows\System32\config\systemprofile\AppData\Local\CrashDumps

if there are any files and send them over? that clould really help us.

again, thank you for the time and effort you put to helping us solving this.

in a private message I sent a link to download the dump files

01.03.2023  21:09         8˙583˙346 overseer.exe.11340.dmp
08.03.2023  20:26         1˙604˙608   overseer.exe.20236.dmp
08.03.2023  15:36        17˙005˙090   overseer.exe.23148.dmp
04.03.2023  16:36         9˙256˙641   overseer.exe.24680.dmp
06.03.2023  16:09        18˙960˙320   overseer.exe.26360.dmp
07.03.2023  15:23        17˙233˙714   overseer.exe.26492.dmp
05.03.2023  15:23        10˙014˙621   overseer.exe.29360.dmp
27.02.2023  15:32         1˙188˙631   overseer.exe.39832.dmp
02.03.2023  17:22        10˙068˙177   overseer.exe.436.dmp

and zipped

10.03.2023  15:41         8˙698˙750    CrashDumps.zip

well done! ZIP file received. We will analyze it ASAP.

Many thanks

hello again,
we believe it issue has been identified and will be corrected in the nearest possible timeframe but allow me to ask
one more additional question -

is the overseer internet and/or network connection blocked somehow? maybe with a firewall?

thank you again for helping us

Aside from the internet connection… there’s no consciously set rule like that. I’m tracking the problem on a Lenovo Thinkcentre neo 70 t i7 with Windows 11 Pro. Both the computer and the OS use more advanced protection systems, which I don’t see too much into.

In the firewall rules I found two rules for Avast UI (TCP-in and UDP-in) all yes enable, Overseer is not in the rules. I run the PC as User, I don’t remember any messages indicating collisions on the firewall

Complete export of the list of rules in - out is in attachement. Or you need to guide me what and where to check.

https://img42.rajce.idnes.cz/d4203/18/18372/18372711_60b6d9b54f7354114e4ff6ab299cb112/images/Snmekobrazovky2023-03-12120341.jpg?ver=0

I always used to delete overseer.exe and its related scheduled task after every update of Avast. Then, a few months ago, I let it be to see if it would behave. It went well for a while, but then…

Today, I noticed that my PC was very slow when starting programs. Turns out overseer.exe was maxing out a core permanently, and massively slowing down every other process trying to run.

Even with almost all programs closed, overseer.exe kept hogging a core at max load. An otherwise idle PC, and overseer.exe just going full send. Great.

The fix was the same one that I used to employ previously: completely remove overseer.exe. Instantly performance was restored.

Maybe in a year I’ll give it another try. Until then overseer.exe gets rooted out first thing after an update.

I communicated with support for a long time and provided them with the necessary debug information. they found some problem that should be remedied and removed by now. I have a problem and it doesn’t show anymore

I know. I’m not going to do that. So I’ll just hope overseer gets fixed and try again sometime in the future.