+34 900 840 407
support@cytomic.ai
Performance issues and high CPU usage on Windows servers monitored by SysMon
Related Products_
- Advanced EPDR
- Advanced EDR
Issue Status_
Tracking ID: KER-608
Status: Resolved
Type of solution: Hotfix
Symptoms_
High CPU usage and performance issues on Windows servers monitored by Sysmon.
Solution_
- Download and save the hotfix file to the endpoint:
hf-ker608-system_rules_consumption.exe - Double-click the downloaded file.
- The hotfix installation does not require restarting the computer. However, under certain circumstances, you may be prompted to restart for the hotfix to be fully applied. If you cannot restart the computer right away, select No when prompted. This postpones the application of the hotfix until the next system restart.Note: To download an unattended or silent version of the hotfix, click here. The hotfix is applied after the next system restart.
Release Notes_
Next, find all the changes the hotfix includes.
Affected versions
Protections between v8.00.22.0010 and v8.00.22.0022. To see your Advanced EDR/EPDR product version, see this article.
File Details
The hotfix updates the following file:
| File name | Location | Modified Date | Hotfix to be included in future versions? |
|---|---|---|---|
| 00000014 | C:\ProgramData\Panda Security\Security Protection\00000014 | December 1st, 2023 | Yes |
| 00000021 | C:\ProgramData\Panda Security\Security Protection\00000021 | December 1st, 2023 | Yes |
| 0x1000000D.DAT | C:\Program Files (x86)\Panda Security\WAC\Cache\0x1000000D.DAT | November 29th, 2023 | Yes |
| 0x10000045.DAT | C:\Program Files (x86)\Panda Security\WAC\Cache\0x10000045.DAT | December 7th, 2023 | Yes |
Verify Hotfix Application
To confirm the correct application of the hotfix, check the file version (in File Details section) or else, verify the values of these Registry keys:
| 32 bits Architecture | 64 bits Architecture | ||
|---|---|---|---|
| Registry Key | Value | Registry Key | Value |
| HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup\Hotfix history\HF_SYSTEM_Rules_Consumption | Revision [REG_DWORD] 1 | HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Panda Software\Setup\Hotfix history\HF_SYSTEM_Rules_Consumption | [REG_DWORD]
1 |
| HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup\Hotfix history\HF_SYSTEM_Rules_Consumption | Result [REG_DWORD]
0 = Success |
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Panda Software\Setup\Hotfix history\HF_SYSTEM_Rules_Consumption | [REG_DWORD]
0 = Success |
