Immunet Plus Memorey Usage And Odd Update Bugs

[bvamundsen]

First bug: I've noticed a pattern of high memory usage with Immunet Plus 3.0.8.9025 on my WinXP SP3 MCE 2002. I'm checking this with Windows Task Manager monitoring usage of agent.exe. When I first start-up the computer in the morning the memory usage for Immunet will be as high as 138 MB and stay there for an extended time, more than 30 minutes. CPU usage will also go to about 30 percent and not drop below 10 percent. If I open the IPtray and click on "Update Now" then the CPU usage will go even higher and memory usage stays about the same. The CPU usage will drop after updates are done, and memorey will drop to around 7 MB. 10 Minutes later my memory is back up to 39 MB. My only work around now is to "update daily" before opening any othe applications. memory usage will stay at about 39 MB. I do not have ClamAV engine or updates turned on or any scheduled scans set. Are others seeing this pattern?

 

Second bug: I have the ClamAV engine and definitiions turned off, so my updates should only be updating the Tetra engine. If I open the IPTray then click "Update Now" it appears that is what happens. However, if I click "Update Now" a second time then the Freshclam and Freshclamwrapper will run, download all the daily files and update them. If I click the "Update Now" a third time it only appears to check the program and Tetra definitiions. The ClamAV update is great if for some reason I loose Internet connection and think to turn-on ClamAV detection, but if I have it turned off, then it should not be updating. My only work around is to "update daily" before opening any other applications. Anyone else have this same experience?

 

I still have Immunet Plus as my primary AV, but I notice it is using a lot of memory and CPU usage than a year ago when I started using it. I'm not sure what is causing the above issues. I also notice that Immunet will at times take precedence on CPU usage and slow the reaction time of other applications, especially Quickbooks Premier 2009, FIrefox 17.06 and Claws-mail 3.9.1. There doesn't seem to be any workaround other than patience for Immunet to finish whatever it is doing.

 

If Ritchie or the developers are reading, I'd be happy to catch an SDT snapshot of my machine, just tell me when to run the tool and where to send the file.

 

Brian

[ritchie58]

Hi Brian, on my Win 7 machine the average RAM usage when idle is about 25 to 30 MB. Of course it will temporarly increase if I'm updating the ClamAV module or running a scan. I don't see the high CPU usage for 30 minutes or more as you are so that's a little odd. One thing that might account for this is if you have a program that writes to disk often and Immunet is scanning these files while they're being created. If you turn off Blocking Mode that might help with that.

 

As far as the ClamAV module updating even though you have this disabled is definetly strange! I would encourage you to run the SDT and submit that 7zip report and any screenshots you may have to support@immunet.com at your convenience.

 

For Firefox I have the Profiles folder excluded to help speed up the browser. The file path for my Win 7 OS is: C:\Users\Ritchie\AppData\Local\Mozilla\Firefox\Profiles For your XP machine the file path will look something similar. Open Folder Options and click on Show Hidden Files and Folders first. Once you add the exclusion don't forget to uncheck this box again as this is a built in Windows security feature. As far as the other programs you mentioned if Immunet is slowing them down too much you can also add exclusions for them too if need be. I hope this info is helpful Brian! :-P

 

Best wishes, Ritchie...

[smitty2868]

Hi

 

Like Brian I find agent.exe using as much as 85% of my CPU...I am running a little Acer Aspire One Netbook with 2 gig memory.

I have pared down services and processes to approx. 24-31 active depending on the browser I use. Sometimes Immunet does not

get in the way but once agent.exe gets active, that's it. i have Clam and Tetra engines turned off. I have to use Process explorer

to stop it or reboot. Also have to manually update definitions, this is a pain. I notice Ritchie indicated "exclusuons" - how in earth

do you get there? Finally, occasionally Immunet signals a baddie but the dialogue is confusing...when notified what is the correct

response?

 

Thanks for any response

 

regards

 

smitty2868

[ritchie58]

Hi smitty, have you tried to turn off Blocking Mode to see if that helps with the CPU usage? If not, give that a try. If you have the ClamAV & the TETRA modules disabled you shouldn't have to manually update. The cloud modules (ETHOS, SPERO) don't need to be manually updated either. If you continue to have problems you are welcome to submit a SDT report to Support.

 

Adding exclusions to Immunet is not rocket science, in fact it's fairly easy. Open the GUI and click on Settings, scroll down to Exclusions, click on Add New Exclusions, here you can manually add a folder or file by typing in the correct file path to exclude or, easier yet, click on the Browse button to select a folder or file, click on the Folder or file and click Add Exclusion, click Apply and Close and your done!

 

By default, Immunet will automatically quarantine any known malicious or unknown suspicious files or processes. If you feel a False Positive has taken place you can post what the file is in our False Positives section of the forum and we can take a look at it for you to make sure that it isn't malware. Virustotal is a great web site to check for yourself for a file's legitmaticy too. Before restoring any file from Quarantine it's very important to make sure that the file is not malicious first! If a file is restored from Quarantine it is automatically added to the Exclusion list and will no longer be scanned.

 

Cheers, Ritchie...