What patch level were you at previously? Starting with Patch 5, there have been some fixes for thread usage with the scanner.
There are also fixes in TIE if you're using TIE, which address this type of symptom.
I'm coming mostly from Patch 6 which was not too great for us in itself. I was hoping that 7 would clear up some of these corrupt installs/performance issues. I've looked at some of this but haven't found the "magic button" yet. Do you have any of these articles for ref?
Not currently using TIE but thanks
OK... that's the only "known" thing that comes to mind to cause an unexpected high CPU symptom in our on access scanner (mcshield.exe process).
Anything else ought to be investigated.
It's definitely unexpected if you're seeing this as new behavior when already being on P6 and then going to P7.
High CPU symptoms are actually easier to investigate than many other types of problems. Creating a dump of the process while it's in that high CPU state is the best starting point, so we can review the threads and see which ones are getting all the CPU (and why). Such an approach requires engaging Support though.
And, the possibility remains that a full system dump may be required to find root cause; it just depends on whether the thread activity is evident in the process dump or if it indicates that there's activity occurring in kernel that needs to be looked at.