Endpoint Protection Service

Alan_Bat

I have a process using most of my cpu called Endpoint Security Service

It resides inside the F-secure folder

I cannot stop it or delete the .exe file.

Its icon is a red basdge outline (so not a usual F-secure icon)

Id it really part of F-secure, or have I been infected?

If part of F-secure how can I stop it using all of my cpu

File location is C:\Program Files (x86)\F-Secure\TOTAL\epp\Endpoint Protection SDK

Mathis

I noticed it too. Its several processes but the Endpoint Sdk takes a lot of resources. Its apparently Aviras anti-virus engine. F-secure is merging with Avira so they are now using their software. But the weird part is that all the certificates on Avira are expired. Doesnt feel very safe to get surprised like this with unknown programs that cant be installed or even closed without any info, and with expired certificates too :/

Firmy

Hello @Alan_Bat @Mathis

Welcome to the F-Secure Community. Thank you for your question and comment.

Yes, this is a common expectation. In version 25.2 of F-Secure Total, there have been updates related to the Device Protection Security Core. You can find more details in the Release Notes.

If you have any further questions, please don't hesitate to reach out. Thank you, and have a wonderful day.

Alan_Bat

Hello Firmy

This cannot be expected behaviour. Nowhere in the release notes does this say that the new security core means that it will now take significan extra cpu continuously. On teh fuirst day it was about 30%, this has now settled to closer to 10% BUT what it is doing is making excessing calls to DNS Client, which then takes an additional 20% of cpu. If I stop F-secure then the DNS Client cpu usage returns to being very smmall.

Making a change that results in 30% cpu continuously should never be shrugged off as "expected behaviour"

Firmy

Hello @Alan_Bat

Thank you for your reply.

Apologies for the misunderstanding earlier. I was referring to the Endpoint Protection Service that can be found in Task Manager. This is expected behavior, but we understand your concern regarding the high CPU usage.

We recognize how frustrating it can be when the Endpoint Protection Service consumes significant system resources, and we want to help resolve this issue. To assist us in investigating further, could you please provide the following information:

1. The exact version of F-Secure Total you are currently using.
2. A screenshot showing the high CPU usage in Task Manager, which will help us better understand how the process is behaving.
3. Could you confirm if there are any specific activities or events that trigger the high CPU usage, or if it happens continuously?

This information will help us analyze the issue more thoroughly and allow us to escalate it to our product team if necessary.

We sincerely regret any inconvenience this has caused and appreciate your patience while we work towards a solution. If you need any further assistance, please don’t hesitate to reach out.

Thank you, and have a wonderful day.

Alan_Bat

Hello

The problem started about 10 days ago.

I am using F-Secure version 25.3

cpu F-secure.JPG

There is no specific activity that triggers this. It is continous.

earlier today Windows wantwed to do an update (so my Windows is certainly up to date) and the behaviour was present before I started anything else

As I said before the high Service Host: DNS client cpu goes if F-secure is stopped

LOWE

In conjunction with this problem I get daily e-mails fron McAfee, which I tried to unsubscribe, but the messages. still comes (seems like junk mail to mee).

The icon for the Endpoint Protection Service is similar to McAfees icon. You get the feeling that this is some serious ****

JOnes

To stop receiving emails from McAfee and remove all McAfee programs from your Windows system, follow these steps:

1. Unsubscribe from McAfee Emails:

If you’re receiving marketing or junk emails from McAfee, you can try the following:

• Open one of the McAfee emails you’ve received.
• Scroll down to the bottom of the email, and you should see an "Unsubscribe" link. Click it to stop receiving emails from McAfee.
• If there is no unsubscribe option, or it doesn't work, you can mark the emails as spam or junk in your email client.

2. Uninstall McAfee Programs:

To fully remove McAfee software from your Windows system, follow these steps:

A. Using the Control Panel:

1. Open the Control Panel: Press Windows + R, type control, and press Enter.
2. Go to Programs: Click on "Uninstall a program" under the "Programs" section.
3. Find McAfee Products: Scroll through the list and look for any McAfee programs, such as McAfee LiveSafe, McAfee Total Protection, or any McAfee security tools.
4. Uninstall: Right-click on each McAfee program and select "Uninstall." Follow the prompts to complete the uninstallation.

B. Using McAfee Removal Tool (MCPR):

Sometimes McAfee software doesn't get completely removed through the regular uninstallation process. In such cases, you can use the McAfee Removal Tool (MCPR) to remove any leftover files:

1. Download the McAfee Consumer Product Removal (MCPR) tool from the official McAfee website: MCPR Tool.
2. Run the MCPR tool: Follow the on-screen instructions to remove all McAfee files from your system.
3. After the process is complete, restart your computer.

https://www.youtube.com/watch?v=S2DQTK6vgZM

3. Check for Leftover Files and Registry Entries (Optional but Recommended):

After uninstalling McAfee, it’s good practice to ensure there are no leftover files or registry entries:

A. Delete Leftover Files:

1. Check the Program Files Folder: Go to C:\Program Files (x86)\ and C:\Program Files\ and delete any remaining McAfee folders if they exist.
2. Check AppData: Open C:\Users\[Your Username]\AppData\Local\ and C:\Users\[Your Username]\AppData\Roaming\ for any McAfee folders and delete them.

B. Clean Up the Registry (Optional):

1. Press Windows + R, type regedit, and press Enter to open the Registry Editor.
2. Navigate to McAfee Entries: Use Ctrl + F to search for "McAfee" in the registry. Delete any McAfee-related entries found, but be careful not to delete anything that seems unrelated to McAfee to avoid causing issues with your system.

Note: Be cautious when editing the registry. If unsure, it’s best to skip this step or seek professional help.

4. Restart Your Computer:

After completing these steps, restart your computer to ensure all McAfee-related processes are completely removed and that your system is clean.

After following these steps, you should stop receiving McAfee emails and have removed all McAfee programs from your system. If you continue to receive emails or notice McAfee components on your system, you may want to reach out to McAfee support for further assistance.

Now you are sure that McAfee programs do not conflict with f-secure and cause cpu peeks

Firmy

Hello @Alan_Bat

Thank you for your reply.

We kindly request that you generate an fsdiag file to assist us in investigating this issue. For your privacy and security, please share the fsdiag with us privately and do not submit it publicly in the forum.

I have sent you a private message with instructions. Please share the file with us there.

We look forward to hearing from you.

Thank you.

Alan_Bat

ACtually, looking again, I see that it the opening of Firefox (which I usually always have running) that starts the high cpu of Endpoint Protection Seervice + Service Host DNS Client

Closing Firefox then makes no difference

LOWE

Interesting comment Alan. I am using Google and the upstart of Google Chrome is annoyingly slow now

Alan_Bat

I see now that after any reboot F-0secure continuously used heavy cpu even before any other application started. So is effectivly no longer usable as a product,.

Seems to be because they have switched to AVira - so that product is either very poor software or has not been properly integrated with F-secure.

Anyone know if they are working in fixing this and when a rollout might happen.

Is it possible in the meantime to rollback to an earlier vesrion of the F-secure?

TomR

Can firmy please contact me? I have the same problem, and I need to get in contact with Fsecure. I have had a subscription for years, but now this Endpoint Protection Service by AVira is eating my resources and using continously up to 5% of the CPU resources. This is not good!

Firmy

Hello @TomR

We have sent you a private message. Kindly provide us with the necessary information for us to investigate this issue.

Hello @Alan_Bat

We have received the fsdiag and forwarded the information to our team. Once we have received their feedback, we will let you know.

Thank you.