High levels of disk activity of 'Trend Micro Anti-Malware Solution Platform'

  • 6
  • Question
  • Updated 7 months ago
  • Answered
For several weeks, I have been experiencing periods of time on my Windows 10 Professional 64-bit PC, where the ‘Trend Micro Anti-Malware Solution Platform’ process (image name ‘coreServiceShell.exe’) of Trend Micro Internet Security v10 has been consuming what seems to be excessively large quantities of disk resource (C: drive, same disk as Windows OS). This has meant that other processes on the PC were having to wait a very long time to get their share of disk activity, sometimes causing minutes of delay, and making program response times frustratingly long, to the point sometimes of appearing to stall the PC for minutes at a time, making the system almost unusable.

Since re-installing the latest version of Trend Micro Internet Security v10 64-bit, this behaviour has been less pronounced, but I can still see, using Resource Monitor, that the coreServiceShell.exe process has user files open for read (in addition to TM files and DLLs used by the process, and the page file) much of the time, even when a scan is not running - neither scheduled nor started manually. The number of user files open at any one time varies considerably; sometimes dozens of files from one or more folders, sometimes just one or two, sometimes none at all.

It is when a large number of files is being scanned, that the disk read response time rises excessively, and overall performance falls through the floor - when the number of open user files falls to a low level, the PC flies again.

Before passing this problem to TM technical support for a solution (if one exists), I would ask if anyone knows of a way of controlling the times when coreServiceShell runs in the background, consuming critical quantities of system resource.
Photo of Sam

Sam

  • 384 Points 250 badge 2x thumb
  • frustrated

Posted 2 years ago

  • 6
Photo of TM_JimL

TM_JimL

  • 290 Points 250 badge 2x thumb
The coreServiceShell.exe takes up 40 MB to 200 MB of memory in a normal computer state or environment. If the consumed memory is higher than 200 MB, it does not go back to normal for about 5 to 10 minutes. If it's still consuming high CPU or memory usage, it will lead to the slow performance of your computer. This can happen due to conflicting software, malware infection or remnants of your old Trend Micro program.
Photo of phil

phil

  • 170 Points 100 badge 2x thumb
This does not solve the problem
Photo of Sam

Sam

  • 384 Points 250 badge 2x thumb
Thank you, TM_JimL.

I have no other malware software installed, except for TM's RUBotted, which, being TM's own product, I had assumed would be compatible with TM Internet Security.  Windows Defender is turned off, which seems to be the default position in WIn10 when other anti-malware software is installed.

No malware infection has been revealed by TMIS for a considerable period of time, something that I thought was an indication of my PC's good 'health' - might this confidence be misplaced?

As to the existence of remnants of 'old' TM installations, how would I know?

So, this raises 3 more questions:
  1. Will TMIS v10 and RUBotted interact adversely with each other?
  2. Can anyone recommend a procedure to check that my PC really is as 'clean' as regularly updated TMIS v10 appears to find it?
  3. Can anyone recommend a utility or procedure that will remove all traces of 'old' Trend Micro software, leaving a virgin platform to re-install onto?
However, this still leaves my original question unresolved, which I will re-phrase into 2 parts for clarity;
  1. Is it usual behaviour of TMIS, to perform scans, which is what I am seeing, of user files at times other than those scheduled for scanning?
  2. Is there any way of managing the extent of the afore-mentioned activity - i.e. scanning of user files at times other than those scheduled for scanning - so that it will not adversely impact system performance?
Would it help if i posted screen captures from Resource Monitor and Task Manager, to illustrate the behaviour of coreServiceShell.exe that I have seen?
Photo of phil

phil

  • 170 Points 100 badge 2x thumb
I'm having the same problem and TM don't appear to know the solution
Photo of TM_JimL

TM_JimL

  • 290 Points 250 badge 2x thumb
If you check out this link:

Slow PC performance due to high CPU or memory usage of CoreServiceShell.exe

The slow PC performance due to a memory usage of CoreServicesShell.exe would have been caused by conflicting softwares with the Trend Micro Program.

And yes, Trend Micro RUBotted is one of the programs on the list that needs to be removed to successfully install Trend Micro Internet Security.

Refer to this link for the list of other conflicting programs:


Programs to remove before installing Trend Micro Security

Running remnant file remover tool/Trend Micro Diagnostic toolkit are just some of the effective tools to completely remove previous Trend Micro Programs.
Photo of stevewinegar

stevewinegar

  • 80 Points 75 badge 2x thumb
I have the same problem, and have gone through all the steps outlined above. The only way I can get the anti-malware to keep from 30+% of my CPU use and about 600 MB of memory is to reboot. I haven't figured what triggers the problem, but that has been my only solution!
Photo of onemoretimelaura

onemoretimelaura

  • 140 Points 100 badge 2x thumb
I agree, telling me that you know what the problem is does not help.  I know I have this problem.  How do I fix it.
Photo of TM_JB

TM_JB, Official Rep

  • 3,354 Points 3k badge 2x thumb
thread necro - 9 months ago

Please reference the new conversation here: Anti-Malware Solution Platform Issue
Photo of onemoretimelaura

onemoretimelaura

  • 140 Points 100 badge 2x thumb

My problem is that it consumes 1.5 GM of memory and does this right from boot.   So far I have not found any way to stop it but am working through your list.


Photo of TM_JB

TM_JB, Official Rep

  • 3,354 Points 3k badge 2x thumb
thread necro - 9 months ago

Please reference the new conversation here: Anti-Malware Solution Platform Issue
Photo of ircil56

ircil56

  • 628 Points 500 badge 2x thumb
Sam, your problem description is excellent. I couldn't have described the problem any better. 

I have removed all 3rd party applications on the list. (Actually I had none.)

I have uninstalled and reinstalled the latest version of TM. (Actually I had the most recent already, but I did it again anyway.)

No help. 

The problem is intermittent.

I noticed that CoreServicesShell.exe was accessing my sys pagefile constantly during the periods of  high (100%) disk usage. I disabled my sys pagefile and am now monitoring.

TM_JimL and TM_JB, is there a tool we can install to help you debug/troubleshoot the problem?

Also, the new conversation Anti-Malware Solution Platform Issue doesn't appear to add any helpful information to this issue, other than we are encouraged to call Premium Support. Is this a free service available if we have this issue? 

Thanks. Chip.
Photo of TM_X

TM_X, Official Rep

  • 5,414 Points 5k badge 2x thumb
Hi ircil56! I believe that one of our Level 2 Engineers is already handling this case with you. If the issue still persists, I highly suggest that you communicate with them so that they can rectify the issue. Thanks in advance! :) 
Photo of gman20zs

gman20zs

  • 90 Points 75 badge 2x thumb
Just to confirm, that this "trend micro anti-malware solution platform" process seems to happen at startup, and particularly when you first run a program of any kind, ie a game launcher. I quit the game and do not attempt to run any other programs until this process has done what it needs to do, which can take around 10 minutes. If you are in a hurry just quit Trend Micro from the taskbar. I assume this process gathers and sends information in an attempt to provide better security, so I let it finish it's process if I plan on surfing the web.
Photo of gman20zs

gman20zs

  • 90 Points 75 badge 2x thumb
Just wanted to add that it can be really annoying when this process only starts when you load certain programs. The computer can be on and sitting there doing nothing for hours, then when you start a certain program "Blizzard Launcher" in my case... it decides to get busy and hog all your resources for 10 minutes plus.
Photo of Tom Emmelot

Tom Emmelot, Champion

  • 17,396 Points 10k badge 2x thumb
Hi gman20zs

Welcome to TM Home users Community, a public site where volunteers try to help each-other , also there are TM Employees that can give answers, that is only at working hours. I am just a volunteer!
May i suggest to reinstall your TM Product.
Hope this helps.

Kind regards,
Tom

This conversation is no longer open for comments or replies.