Microsoft Transport Log Search service using 100% CPU

[BigD1108]

Title explains the issue pretty well. When the service is started, it immediately begins using 100% CPU and eats all available memory until service is stopped and process is killed. Haven't been able to find any good reason why this might happen and searching on Google has not yielded much of use.

I'm evaluating a product that utilizes the Exchange Transport Logs to populate reports desired by senior management, if anyone is wondering why I care about this service.

Exchange 2010 SP2 (virtualized on VMware platform)
60 mailboxes
1vCPU
4GB RAM

Any other questions, just ask. Thanks in advance for the help.

 

[BigD1108]

Bump, anyone have any ideas?

 

[boss6021]

What AV are you running on this server?

 

[BigD1108]

AVG.

 

[boss6021]

Have you tried it without the AV installed or disabled?

 

[YeOldeStonecat]

AVG.

Ugh....sorry to hear that.

Can we assume all of the proper exclusions and file extension settings are done properly in that pig of an AV?

 

[stunning]

Ugh....sorry to hear that.

Can we assume all of the proper exclusions and file extension settings are done properly in that pig of an AV?

Agreed,

AVG is just a resource hog. One that is ok that someone does the job for AV is Microsoft forefront. Not the greatest AV but it does the job and keeps disk and network I/O low

 

[BigD1108]

AVG has been uninstalled....problem still persists.

I don't care for AVG more than anyone else, but it's a module that we use along with the rest of the modules in our RMM tool.

 

[stunning]

screen shot of the processes run?

 

[BigD1108]

This is a screenshot of the running processes about 10 seconds after starting the service:

If the service remains started, it will consume all available memory.

 

[thefreeaccount]

Have you already used the sysinternals tools procexp and procmon to see what the process is doing?

 

[stunning]

What are you using for mail scanning?