Jump to content
Kernel009

Experiencing High Resource Usage

Recommended Posts

We are having the same problem with random machines exhibiting high memory and sluggish/choppy operations.  We have an open ticket as well.  We have a mix of machines XP, 7 Pro 32 and 64 bit, and Win 10 Pro, Server 2003 on up to Server 2016.

Just wanted to note that it's not an isolated incident.

Share this post


Link to post
Share on other sites

Hi everyone, I just started rolling out Malwarebytes trials and this thread has me concerned for obvious reasons. I know you're busy finding a resolution and hope you don't mind  me asking several questions?

How long did Mbytes work prior?

Does anyone feel installing MBytes on a server slows down network performance? 

Thank you in advance. 

Share this post


Link to post
Share on other sites
23 hours ago, WORKS2016 said:

Hi everyone, I just started rolling out Malwarebytes trials and this thread has me concerned for obvious reasons. I know you're busy finding a resolution and hope you don't mind  me asking several questions?

How long did Mbytes work prior?

Does anyone feel installing MBytes on a server slows down network performance? 

Thank you in advance. 

I've had it deployed for about a year and a half and never had problems on a server until recently. Any issues I had before we always with workstations. 

Share this post


Link to post
Share on other sites
On 9/16/2018 at 10:54 AM, WORKS2016 said:

Hi everyone, I just started rolling out Malwarebytes trials and this thread has me concerned for obvious reasons. I know you're busy finding a resolution and hope you don't mind  me asking several questions?

How long did Mbytes work prior?

Does anyone feel installing MBytes on a server slows down network performance? 

Thank you in advance. 

We had it installed on servers. Until there was an issue where it pegged the CPU at 100% awhile back. Couldn't even remote to the machines. Decided then that we would keep it off anything that critical.

Workstation performance has been on and off. Seems intermittent. However just today we had a user that said their machine was slow and unusable. We killed MB and performance was good again. (no scans running but MB was pegged at 25%) MB started back up right after and everything was fine. 

 

Share this post


Link to post
Share on other sites

We just recently deploy to 280 endpoints. We are experiencing the same problem. It has been reported by our engineering department when using ArcGIS and InfoWater. When we uninstall the Malwarebytes client, performance goes back to normal. This is not a good experience for a new customer. 

Share this post


Link to post
Share on other sites

We will do that next time it happens. Thanks

Just to add to this however. We had a user this morning having the issue. They were getting slugish performance. (scrolling, copy/pasting/etc)

We opened task manager and I didn't see high CPU. However MB service would jump to 25% or so for a few seconds when it would happen. As soon as they rebooted everything was fine.

So hopefully this catches it. But might be more then just a CPU issue. Since for us... it is not even that high all the time. More like it is holding things up.

 

 

Share this post


Link to post
Share on other sites

Just to let you know, people have been complaining about this issue to MalwareBytes for over a year, you can check some of my old posts if they haven't been deleted.

Either they don't care, or enough people aren't submitting tickets for them to figure it out and fix it, but this problem plagued our machines for the entire length of our subscription. Not one of the many updates they pushed out fixed it, in a few cases the updates actually broke the software requiring us to reinstall on dozens of machines.

Good luck, but don't hold your breath.

Share this post


Link to post
Share on other sites

Just seeing this - we will try.  We've also created a separate policy group where Behavioral Monitoring is disabled at the request of Support and are testing that as well.

Share this post


Link to post
Share on other sites

You aren't alone. We have this software deployed on 18 machines and have this issue at random. Rebooting always resolves it.  (Mix of Windows 10 & 7)

As mentioned above, this has been reported on the forums many times, so I'm sure its known and they are working on it

Share this post


Link to post
Share on other sites

Same here.

About 80 Machines. Performance issues on servers and workstations. 
Not all the time, just sporadically. 

When it happens, servers do not react in a proper way and same for clients.
Workaround: Restart mbam-service, but that's no solution.

It looks like some kind of memory leak.

Any suggestions?

Share this post


Link to post
Share on other sites
3 hours ago, anyWARE-Mainz said:

Same here.

About 80 Machines. Performance issues on servers and workstations. 
Not all the time, just sporadically. 

When it happens, servers do not react in a proper way and same for clients.
Workaround: Restart mbam-service, but that's no solution.

It looks like some kind of memory leak.

Any suggestions?

Under your policies... disable "Behavior Protection". That is what we did, all problems went away. You can also add exclusions for the apps you run... but this was easier. When we hear it is fixed... we will turn back on.

 

Share this post


Link to post
Share on other sites
3 hours ago, ShaunB said:

Under your policies... disable "Behavior Protection". That is what we did, all problems went away. You can also add exclusions for the apps you run... but this was easier. When we hear it is fixed... we will turn back on.

 

I'm guessing that's the same as Behavior Monitoring which is a key security layer:

Behavior Monitoring
Detects and blocks ransomware via behavioral monitoring technology

https://www.malwarebytes.com/why-us/

I wonder if a script restarting the service every hour would be a better workaround? I don't know. Have they owned the issue at least?

Share this post


Link to post
Share on other sites
4 minutes ago, Christopherfest said:

I'm guessing that's the same as Behavior Monitoring which is a key security layer:

Behavior Monitoring
Detects and blocks ransomware via behavioral monitoring technology

https://www.malwarebytes.com/why-us/

I wonder if a script restarting the service every hour would be a better workaround? I don't know. Have they owned the issue at least?

With it turned off it is basically like a simple anti virus application. And it depends solely on signatures I believe. Which is fine for us. Since every thing it has ever caught for us in the past... has been signature based.

They are aware of the issue. When we submitted our performance data. They let us know they are working on it.

 

Share this post


Link to post
Share on other sites

Hello,

I would like to provide some updates on this subject--

On Oct 8th we started pushing out a hotfix to resolve the high resource usage issue. It is being metered and watched closely at the moment as an upgrade. For highly impacted machines, reinstalling Malwarebytes Endpoint Agent will force the machine to download the latest (hotfixed) version. For impacted servers, I would advise to remove the Malwarebytes Endpoint Agent and do a reboot first before reinstalling.

Thank you very much for patience while our engineers worked hard to resolve the issue. A special thanks for the data provided by a few users that helped us identify the problem in the Behavior Protection layer.

Thank you,

Vlad B

Share this post


Link to post
Share on other sites
On 10/11/2018 at 6:24 PM, vbarytskyy said:

Hello,

I would like to provide some updates on this subject--

On Oct 8th we started pushing out a hotfix to resolve the high resource usage issue. It is being metered and watched closely at the moment as an upgrade. For highly impacted machines, reinstalling Malwarebytes Endpoint Agent will force the machine to download the latest (hotfixed) version. For impacted servers, I would advise to remove the Malwarebytes Endpoint Agent and do a reboot first before reinstalling.

Thank you very much for patience while our engineers worked hard to resolve the issue. A special thanks for the data provided by a few users that helped us identify the problem in the Behavior Protection layer.

Thank you,

Vlad B

How can i tell if the hotfix has been applied to my endpoints?

Share this post


Link to post
Share on other sites
32 minutes ago, djacobson said:

You will see "Malwarebytes 3.6.1.2716" in add/remove programs and under the Software tab in the cloud portal.

 

1076446577_MBEPPluginUpdate.JPG.6f1f0203c3b57730e4ccada4ea82348b.JPG

1024093137_MBEPPluginUpdateportalview.JPG.146bc607a6f4553a13de9d8a009e1b5f.JPG

 

Thanks ...so i ran a "check for updates" from cloud console and it completed successfully but still shows 3.5.1.2600 on my endpoints. 

Share this post


Link to post
Share on other sites

Try using an asset scan instead. If it still shows the older one, it could be that it has not yet installed it, the update is currently metered. If you'd like to hurry it along, a reinstall will have it pull the newest plugin

Share this post


Link to post
Share on other sites

Thanks for the info, i was worried id have to manually reinstall every endpoint :)  I can wait a bit longer for the update top reach my account.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.