Jump to content

Marcos

Administrators
  • Content Count

    19,663
  • Joined

  • Last visited

  • Days Won

    850

Posts posted by Marcos


  1. On my system I scanned WMI and the registry, 16216 objects in total, which took 3 minutes:

    Number of scanned objects: 16216
    Time of completion: 12:44:08 PM  Total scanning time: 191 sec (00:03:11)

    WMI and registry scans are a part of the initial scan and in-depth scan which may now take several minutes longer because of this. They are also scanned when you click "Scan your computer" (don't confuse it with the Smart scan profile). Since more objects are scanned, slightly longer scan times are expected.


  2. 10 hours ago, junyuanma said:

    Yes. So long as the scan does not start, pages can be loaded.

    Thanks for confirmation. Do you think it would be possible to arrange a remote session as soon as possible? Or if you can do it yourself, we'd need you to ask to install AppVerifier, in safe mode run appverif.exe, press CTRL + A (find the ekrn.exe file in c:\ProgramFiles\ESET ...) and leave the Basic checks defaults.

    Next configure Windows to generate complete user dumps as per https://docs.microsoft.com/en-us/windows/win32/wer/collecting-user-mode-dumps. In particular:

    • Create the registry path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\ekrn.exe
    • Under this path create the value DumpFolder of type REG_EXPAND_SZ
    • Set this value to the path on the disk where the dumps will be created. For example C:\dump
    • Create the value DumpType of type REG_DWORD and set this value to 2.
    • Reboot Windows to normal mode
    • Run "procdump.exe -ma -e 1 -n 10 ekrn.exe" as an administrator
    • Reproduce the issue and wait until a dump is generated at the path you have specified before.

  3. The only known issue with v13.2.15 is that the registry and WMI scanners attempt to scan also non-existing objects. This will be fixed via a module update soon. As for other issues, I'm not aware of other users having reported them with one exception. Please report them to your local ESET support with steps how to reproduce them. If necessary, the support will ask for further logs necessary for troubleshooting.

    As for a bug-free software, there's nothing like that. We don't live in a perfect world and every software maker releases new versions and updates to address reported issues. Even Microsoft releases monthly updates with fixes.


  4. Please carry on as advised here:https://forum.eset.com/topic/24746-av-is-blocking-loading-webpages

    1, Download Procdump from https://docs.microsoft.com/en-us/sysinternals/downloads/procdump
    2, Temporarily disable self-defense in the HIPS setup and reboot the machine
    3, Immediately after the reboot run Procdump as an administrator: "procdump -ma -e 1 -n 10 ekrn.exe" and wait until the issue occurs.

    When the issue occurs, procdump should generate ekrn dumps. Please provide them to us.

×
×
  • Create New...