Consider the following scenario. You have a file server that is running Windows Server 2003. Some clients that have Trend Micro OfficeScan installed connect to this file server. In this scenario, the following symptoms may occur on the file server: Symptoms- CPU utilization for the System process increases to 100 percent.
- If you disconnect the file server's network adapter, CPU utilization decreases to the standard level.
- If you use the Network Monitor tool to trace network traffic, you discover that many packets that are sent from the file server contain a "STATUS_NO_SUCH_FILE" error message. For example, these packets contain an error message that resembles the following:
172.31.28.228 SMB SMB: R; Transact2, Open2 - NT Status: System - Error, Code = (15) STATUS_NO_SUCH_FILE - If you run Process Explorer, you see that the Srv.sys file has a continuous instance that uses excessive system resources.
To download Process Explorer, visit the following Microsoft Web site:
http://www.microsoft.com/technet/sysinternals/default.mspx
Cause
The problem is caused by the Pccntmon.exe file on the client. If you have Trend Micro OfficeScan installed, the operating system queries for the files in folders that do not exist. The Pccntmon.exe file is located in the following folder on the client:
drive:\program files\trend micro\officescan client\pccntmon.exe Version 8.0.0.1004
Resolution
To update OfficeScan, contact Trend Micro.
Workaround
If you cannot immediately obtain the update for Trend Micro OfficeScan, work around this problem by disabling an option in the Trend Micro OfficeScan Management Web Console. To do this, follow these steps:
- In the Trend Micro OfficeScan Management Web Console, click
...