[Faccus] FW: Nexus Machine Slowness Issues

Jennifer Keir jkeir at uwaterloo.ca
Wed Sep 2 07:59:14 EDT 2015


________________________________
From: Jennifer Keir
Sent: Wednesday, September 02, 2015 07:58
To: Mary Burden
Subject: FW: Nexus Machine Slowness Issues

explanation of the Shelley, Taylor, Alan issues ...


________________________________
From: wnag-bounces at engmail.uwaterloo.ca [wnag-bounces at engmail.uwaterloo.ca] on behalf of Dave Hinton [dave.hinton at uwaterloo.ca]
Sent: Tuesday, September 01, 2015 16:12
To: 'wnag at engmail.uwaterloo.ca'
Subject: [wnag] Nexus Machine Slowness Issues

IST has been working on the new issue of “machine login slowness problems” seen over the past week and we think we have found a solution.  Workstations in Academic Support that have experienced slowness has been tracked back to a recent Microsoft update that was installed that effects machines running antiviruses including SCEP, and SEP.


1.       Machines that were affected were found to have generated the following events:


·         In the System events log, numerous errors with Event ID 7011.  The error description "A timeout (30000 milliseconds) was reached while waiting for a transaction response from the MsMpSvc service."

·         This is caused when the antivirus software tries to start a scan on the machine, once the scan starts, the machine is continually slower.


2.       If this is the case it is most likely that Security update 3076895 is installed.

If both security update and the event IDs are found in the event log we recommend that you install a hotfix<https://support.microsoft.com/en-us/kb/3090303>.  A restart is required before the hotfix will take effect.  Once the machine has been rebooted test if the symptoms still appear.  (IE: login is fast and no more 7011 errors).  The hotfix is currently only available for Windows 7, and Server 2008 R2.

On machines that have not had the event log error, it could still experience slowness in the future, if antivirus has not yet started a scan.  IST will be deploying this update to all workstations but we will leave it up to faculties to complete their own testing to determine the scale of deployment.

Additional information:

Others seeing the problem:
http://www.networksteve.com/windows/topic.php/System_Center_2012_R2_Endpoint_Protection_Hanging_on_full_scans/?TopicId=70827&Posts=11
Others seeing the problem with Symantec:
http://answers.microsoft.com/en-us/windows/forum/windows_7-update/issues-with-update-kb3076895-released-on-13082015/f887adce-9183-4d3d-86fb-2d01a9305981?page=2
Microsoft’s Patch that was faulty:
https://support.microsoft.com/en-us/kb/3076895
Hotfix Link:
https://support.microsoft.com/en-us/kb/3090303

Dave Hinton
Manager, Infrastructure Applications & Communications
Information Systems & Technology
University of Waterloo
519-888-4567  x46710

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.uwaterloo.ca/pipermail/faccus/attachments/20150902/8eaa1074/attachment.html>


More information about the Faccus mailing list