Support Center > Search Results > SecureKnowledge Details
High CPU usage is caused by PowerShell script Technical Level
Symptoms
  • High CPU usage is caused by PowerShell script.
Cause
An issue in KAV (Anti-Malware engine) SDK.


Solution
Proceed as follows:
  1. Remove Self-Protection by running PassDialog tool and entering password
  2. Create Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\CheckPoint\Endpoint Security\Anti-Malware\TrustedProcessesList key in registry.
  3. Create the following values under this key with data "0x02":
    c:\windows\system32\winrshost.exe
    c:\windows\system32\cmd.exe
    c:\windows\system32\windowspowershell\v1.0\powershell.exe
  4. Add the following processes to the "Processes to exclude from scan" list in the "On Access scan" configuration using SmartEndpoint:
    c:\windows\system32\winrshost.exe
    c:\windows\system32\cmd.exe
    c:\windows\system32\windowspowershell\v1.0\powershell.exe

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment