Copitrak server becomes unresponsive and experiencing high resource utilization (CPU and/or memory).

Issue

Copitrak server becomes unresponsive and experiencing high resource utilization (CPU and/or memory).

Cause

Microsoft release a Windows Defender update that is causing issues on servers. 

October-2022 (Platform: 4.18.2210.4 | Engine: 1.1.19800.x)

 Security intelligence update version: x.x
 Release date: October 31, 2022
 Platform: 4.18.2210.4
 Engine: 1.1.19800.x
 Support phase: Security and Critical Updates

Engine version: 1.1.19800.x (final version number coming soon)
Security intelligence update version: x.x (coming soon)

Solution

Kofax recommends you contact Microsoft for resolution and recommendations.   This issue is identical to an issue introduced in a Windows Defender update back in March 2002.    Disabling Windows Defender Real Time Scanning will return normal function but any security concerns with doing so should be evalutated.  

Customers who applied the March 2022 Microsoft Defender engine update (1.1.19100.5) might have encountered high resource utilization (CPU and/or memory). Microsoft has released an update (1.1.19200.5) that resolves the bugs introduced in the earlier version. Customers are recommended to update to at least this new engine build of Antivirus Engine (1.1.19200.5). To ensure any performance issues are fully fixed, it's recommended to reboot machines after applying update.

As of 11/1/2022 Microsoft was aware of the issue and working on a new update. 

Level of Complexity 

 High

Applies to  

References

https://learn.microsoft.com/en-us/mi...o365-worldwide