locked
Windows firewall uses almost all CPU while runing on WIN7 RRS feed

All replies

  • If you are sure that it is the svchost process running Windows firewall,
    then I would ensure that all of the drivers/BIOS/firmware are up to date
    for the network interfaces and verify that all critical and recommended
    updates have been applied. If you run process explorer,
     
     
    Right click the high CPU/Memory usage process and open the properties
    and then click Services tab , what is displayed?
     
     

    -- Mike Burr
    Thursday, July 29, 2010 5:31 PM
  • Great that you found my guide.

    Which firewall functions are called so often?


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Thursday, July 29, 2010 9:41 PM
  • Hi,

     

    I would like to confirm that do you have any third party antivirus program or firewall installed?

     

    If so, you may temporarily disable them to check if they conflicts with Windows Firewall.

     

    In addition, please also test the issue in Clean Boot to remove the other possible third party software conflicts.

     

    Regards,


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Monday, August 2, 2010 5:19 AM
  • can you please upload the etl file? I can take a look at it.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Monday, August 2, 2010 11:00 AM
  • hi again,

     

    I'm using eset nod 32 client here, and it does not conflict,

    and it's happening only on one WIN7 laptop, , there is no problem with my pc...(also a win7).

     

    where can I find the ETL file?

    Tuesday, August 3, 2010 10:02 AM
  • Where you stored it. You followed my guide on msfn.org and made the trace. So where did you save the etl file, generated from xperf?

    André


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Tuesday, August 3, 2010 11:49 AM
  • http://i31.tinypic.com/2wcek44.jpg
    Tuesday, August 3, 2010 12:54 PM
  • this may be an issue with the Windows Filtering Platform ( http://msdn.microsoft.com/en-us/library/aa366510(VS.85).aspx ). How many firewall rules do you have applied?

    Maybe this hotfix improves it:

    http://support.microsoft.com/kb/981889/en 

    A Windows Filtering Platform (WFP) driver hotfix rollup package is available for Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Tuesday, August 3, 2010 1:02 PM
  • hi

     

    the hotfix- did not solve the problem,

    the SVChost still uses almost 100% of one of the CPU's,the user needs sometimes to restart (until the next time it happens) or restart the services manually.

    any thoughts\offers?

     

    thanks

    Sunday, August 8, 2010 8:10 AM
  • How many firewall rules have you applied?

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Sunday, August 8, 2010 3:08 PM