mftutil.exe Avast 2015

Hello

Since the update of Avast 2015, there is a process stuck in my computer, taking about 12% of CPU time. Is mtftutil.exe, the Avast mft utility.

My computer is a laptop Dell XPS with Intel Core I7. While this exe is running, the CPU is used at top speed and the fan is working hard.

Can someone tell me if is normal?

I tried to uninstall / reinstall Avast but the process is starting again.

Using Process Explorer I can see that this process ( mftutil.exe) is a child process of ngtool.exe (Avast NG command-line tool).

Can someone help me?

thanks in advance.

Dan

This component is part of avast NG. When you install avast for the first time, it takes some minutes to prepare NG environment.
We’ll try to decrease HDD/CPU requirements in next release. Right now, I’d recommend you to wait for completion, or uninstall NG component.

Hi Pk.

It takes more than minutes. Using Process Explorer I car read this on one of the threads: !CVssJetWriter::Set WriterFailure+0x156bc.
In /ProgramData/Avast/Ng/Logs/ngtool.log there is:

25.11.2014 11:54:41.470 5340 | error: TypeLib(Un)Register C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxC.dll, error 0x8002801c
25.11.2014 11:54:41.526 5340 | Installing VirtualBox…
25.11.2014 11:55:02.294 5340 | Creating snapshot…
25.11.2014 11:56:57.007 5340 | Volume shadow set: {0630b580-7804-4966-86c6-6542718a85b2}
25.11.2014 11:56:58.013 5340 | BCD volume: \?\GLOBALROOT\Device\HarddiskVolumeShadowCopy14
25.11.2014 11:56:58.051 5340 | Windows volume: \?\GLOBALROOT\Device\HarddiskVolumeShadowCopy15
25.11.2014 11:56:58.085 5340 | Creating new hive files…
25.11.2014 11:59:09.395 5340 | Cloning NTFS volumes…
25.11.2014 12:23:14.589 5340 | error: mftutil.exe exited with error: 0x40010004
25.11.2014 12:23:14.676 5340 | CmdAvastInstallWrapper done (result: 0x40010004)
25.11.2014 12:33:00.924 5488 | Cloning NTFS volumes…

I have Virtualbox on that computer. Is that a problem?

What are you cloning? Why do you need Virtual Box?

The process seems to fail cloning NTFS volumes. Maybe something is wrong in clone.cfg…

Hi,

Two bugs to report.

  1. I’m getting calls from people about their laptops becoming very loud thanks to very active fans. The common theme seems to be Avast2015, with mftutil.exe spinning its wheels doing nothing. I can’t find a way to turn it off. Task Manager can’t kill it either… neither can taskkill.exe (even run from Task Scheduler as System) - so there it persists, consuming a whole core and cranking up laptop temperatures to 70C+

  2. Your forum login is bugged. When I go to login, it demands that I use my email address rather than the username that I signed up under many years ago. It then fails to login. When I go to register, it says my email address is in use. When I ask it to reset my password, it doesn’t send a reset email…

Thanks to BugMeNot I was able to report these two bugs. Neither of them inspires confidence, though. :o

http://i.imgur.com/PuX3a78.png

Hoping for a fix ASAP!

Hi b3637558

I have the same screen on Process Explorer.

My computer was 9 hours with loud fan without ending.

As I reported above, it seems that mftutil.exe fails cloning and get stuck there.

Pk, by the way, mftutil.exe uses low system priority, but takes 12% of my CPU time and my system fan sounds like a plane.

The only solution for me is reconfigure avast without NG module. More than a solution is a workaround.

There is still a question. I have VirtualBox installed on that computer. Will it be a problem?

Please fix this soon and please, like b3637558 please, revise your capcha. They are not always “human readable”.

Thanks.

It takes more than minutes.
[b]@daniel.portella:[/b] mftutil.exe needs ~30sec on my SSD, on normal HDD it can take several minutes. Since you said mftutil.exe is running on low priority, then it can be much more. I see low background IO isn't still enough, we'll try to set maximum CPU limit for these processes. The problem is, preparing NG environment is consist of 3 processes which require high CPU+HDD (once this work is done, it's not needed to rebuild the process). We'll try to limit CPU for these jobs in next release build. Error 0x40010004 means DBG_TERMINATE_PROCESS (debugger terminated process). Did you try to debug mftutil.exe process? Or should I look closer where is the problem.
The process seems to fail cloning NTFS volumes. Maybe something is wrong in clone.cfg... What are you cloning?
[b]@daniel.portella:[/b] it's probably caused by lower IO priority; we do some internal tests (on ~6k very different computers) and I didn't observe any deadlocks; if you're interested in tech details (what we clone), please send me email
I have VirtualBox installed on that computer. Will it be a problem?
[b]@daniel.portella:[/b] no, you can use your VirtualBox on the same computer with NG; we use own build, with renamed components, so it won't conflict
I'm getting calls from people about their laptops becoming very loud thanks to very active fans.
[b]@b3637558:[/b] sorry for this; you can uninstall NG component, or wait some time to finish preparing NG environment; we'll improve this build process in next avast build

Hi PK,

Do you have to uninstall Avast entirely to get rid of that component? I don’t recall seeing it under Change. Wish I had taken a screenshot of that screen, to know for sure.

Avast 2014 had been installed prior on that computer, with just the Web, Mail, and Filesystem shields, plus Software Updater and Browser Cleanup. All other optional components were unticked. After the upgrade to 2015, mftutil.exe showed up, but the only components listed under ‘Settings’ were the ones that I listed above, and as I said, I don’t recall seeing it under Add/Remove/Change.

I agree that your captchas are terrible. I have to try to get past them a half dozen times. It may soon think that I’m a robot. ;D

If you are concerned about I/O, I suggest you add a message. “Avast is preparing your computer’s defenses, and may run slowly for a few minutes.” - stick it in the bottom right corner where the scan percentage windows go. :wink:

I’m curious when mftutil.exe would know to cut in on a power user’s computer? I often have 6 or more physical cores running 100%, 300+ processes and max out 32GB of memory. I/O is consistent on my SSDs, HDDs, and array. That process might be waiting a very long time, while if it cut in it would probably be finished very quickly.

@pk, the low priority is set by Avast, not for me.
As I said, I had the computer 9 hours with this process stuck. My computer have a 500Gb Hard disk and it’s not full. The problem is not to limit CPU usage, the problem is that the process get stuck when cloning.
All the information that I have is extracted from Process Explorer. I’m not debugging anything.

In the forum are several examples of laptops with system fans at top speed and mftutil.exe stuck. There is a problem, specially with laptops.
I think that you are cloning some environment using NFTS shadows. Am I wrong?

This is what I made. Call to Uninstall Avast, when the program appears select modify and then, in the components section uncheck NG. Three minutes, a reboot and voalà.

And remember, please check your capcha. I’m not sure if I’m still human.
Arhg! 3rd try with stupid capcha

Hi

Just throwing in my 2 cents because this topic came up in a search. I am having the same problem. The fan is kicked up and doesn’t shut off.

After the update the mftutil.exe is not ending, it 12-13% and doesn’t finish even after leaving my laptop on for 2 days. I uninstalled Avast, fixed the problem. Reinstalled and it’s back.

So I’ll leave it for now and hope the next update fixes it.

Dell XPS L502X Windows 7 64 bit, i7 core, 8gb RAM if it matters.

Also, sorry to say I’m not technically inclined so if the solution was addressed above, I didn’t catch it.

Bonjour à tous et à toutes,

le problème est identique depuis “Avast 2015” mftutil.exe prend 50% Hard Disk :o

Par contre;
1:PC = ok
1: Acer (laptop) = ok
1: Dell Précision (laptop) = NON ?! -_- ?!

Comme Wizbang The Mighty, Avast 2015 n’aime pas Dell ou que la version 2014!

En espérant, rapidement maintenant une mise à jour.