The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
High CPU usage is caused by PowerShell script
Endpoint Security Client
High CPU usage is caused by PowerShell script.
An issue in KAV (Anti-Malware engine) SDK.
Proceed as follows:
Remove Self-Protection by running PassDialog tool and entering password
Create Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\CheckPoint\Endpoint Security\Anti-Malware\TrustedProcessesList key in registry.
Create the following values under this key with data "0x02": c:\windows\system32\winrshost.exe c:\windows\system32\cmd.exe c:\windows\system32\windowspowershell\v1.0\powershell.exe
Add the following processes to the "Processes to exclude from scan" list in the "On Access scan" configuration using SmartEndpoint: c:\windows\system32\winrshost.exe c:\windows\system32\cmd.exe c:\windows\system32\windowspowershell\v1.0\powershell.exe
This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.
Give us Feedback
Thanks for your feedback!
Are you sure you want to rate this stars?