Bsdiff.exe is causing a sudden spike in CPU usage on the OfficeScan server that lasts for one to two minutes.
- Perform a debug.
- Enable logging by editing the \WSS\Log.ini file as below:
==============
[TMCOMMONLOGGING]
LogEnable = 1
LogLevel = 4
============== - Edit the Aucfg.ini file on the same folder and then set it as below:
==============
[debug]
Level=-1
============== - Restart the Trend Micro Smart scan Server service.
- When the problem occurs, please collect the following:
d.1 PCCSRV\WSS\AU.ini
d.2. PCCSRV\WSS\aucfg.ini
d.3. PCCSRV\WSS\Diagnostic.log
d.4 PCCSRV\WSS\log.ini
d.5. PCCSRV\WSS\PatternVersion.ini
d.6. PCCSRV\WSS\UpdatePattern.ini
d.7 PCCSRV\WSS\Patterns\*.*
d.8 PCCSRV\WSS\AU_Data\*.*
d.9 CDT Log from the Server ( no replication required )
d.10 System event logs - Send the logs to Trend Micro Technical Support.
- Enable logging by editing the \WSS\Log.ini file as below:
- As a temporary measure, disable the update for ISS under Smart Scan > Integrated Server by deselecting Enable Schedule updates.
This should be done while waiting for an update from Trend Micro Technical Support regarding the logs you provided.
MaxDiff=8
KeepPtn=42