Sundeep
Sundeep

Reputation: 2135

PerfView: CPU MSec is 0 for all the processes

I am running PerfView on Windows Server 2012. It is running on a VMware VM. As shown in the below image, the CPU is 0 for all the processes.

Where should I start debugging?

enter image description here

Upvotes: 4

Views: 484

Answers (2)

canton7
canton7

Reputation: 42235

It looks like this GitHub issue is relevant. From this comment:

I just learned of a feature in Microsoft Defender that may cause the behavior you're seeing, as it takes the PMU from ETW. You can read more about it at https://www.microsoft.com/security/blog/2021/04/26/defending-against-cryptojacking-with-microsoft-defender-for-endpoint-and-intel-tdt/ and https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/defending-against-ransomware-with-microsoft-defender-for/ba-p/3243941.

The feature can be disabled by running powershell.exe Set-MpPreference -DisableTDTFeature $true.

Long story short, run the following from Powershell:

Set-MpPreference -DisableTDTFeature $true

Upvotes: 1

Aleksandar Zivkovic
Aleksandar Zivkovic

Reputation: 71

I had the same issue and couldn't figure it out. So I deleted standalone exe, along with other perfview related zips and re-downloaded latest zip from the official microsoft website. Unzipped it and it started working again. This is definitely a bug.

Upvotes: 0

Related Questions