High CPU when accessing DFS file shares on a computer running PGP Desktop 10.2


Article ID: 156668


Updated On:


Symantec Products


When accessing files (whether or not they are encrypted) on a DFS file share with a computer that has PGP Desktop 10.2 installed, the CPU may run high or performance may slow down when accessing these files. In the case of high CPU utilization, Windows Task Manager will show that Windows Explorer (explorer.exe) is using an excessive percentage of the processor.


The pgpfsshl.dll file uses excessive processor resources. This DLL is responsible for providing the overlay icons used for the PGP NetShare component with PGP Desktop. This icon is displayed when the files are encrypted using PGP NetShare.


  • PGP Desktop 10.2 or 10.2.1.
  • Windows Server using a file share with DFS replication enabled.


Upgrade to Encryption Desktop 10.3 or above.

Alternatively, use one of the following workarounds:

1. From the Tools / Options menu of PGP Desktop, click on the NetShare tab and disable the option Overlay PGP icon on secured files and folders.

2. Unregister PGPfsshl.dll by running the following command with local administrator permissions, then restart the machine:

regsvr32 /u PGPfsshl.dll

3. If NetShare is not required, upgrade to a later release and use the msiexec switch to disable NetShare completely. Note that disabling NetShare in Consumer Policy is not sufficient. In this example, pgpdesktop.msi is the installation file:

msiexec /i pgpdesktop.msi PGP_INSTALL_NETSHARE=0