dimulec

I guess we are talking about different issues. But that is ok, I will just work with firewall disabled.

Are you saying that a couple of months ago when ESET updated to newer version it deleted some rules? Because I am using ESET with personal firewall for as long as it exists on the market. And this started only like 2 months ago.

No one reads the original post. Just imagine... a house with wired connections. In one room there is a laptop with a small screen resolution and ESET installed. In another room an iMac with 5K monitor. All on the same wired /24 subnet. Subnet is included in the trusted zone. I use that laptop remotely because for development purposes I need a high resolution screen. Which I have on iMac. Other specs for that laptop are ok for development - i9 CPU and 32 GB of RAM. Now, I also have office 365 on the remote laptop. Office 365 includes a ClickToRun service, that is updated often. I included that exe file in all possible ESET exceptions but still after each update ESET pops up a dialog asking if I am ok with ClickToRun connecting to Internet. And if I did not react in 5 min ALL network connections are disabled on the remote laptop. NOT just RDP or ClickToRun - ALL connections. So I have to walk to that laptop, open it, login and click "allow". After that connections are back up. This issue did not exist until the ESET update a few month ago.

Local subnet is already in the trusted zone. And I did not understand about RDP being only allowed to trusted zone IPs. Then how do I connect to all 120 remote desktops in our colocation? Those IPs are not trusted. I mean I have no problem connecting there. Anyway, thank you for the response. I will try to play with zones a bit.

I have ESET Internet Security in interactive mode. Computer is located pretty far from the place I work (within my house) and I connect to it with remote desktop. When an unknown connection is detected ESET displays a usual "allow/deny" popup and I can select whatever I need. If the remote desktop screen is not visible (covered by other windows) and I don't react to that popup right away then after some time all network connections on the remote computer are going down, remote desktop disconnects and I have to go to that computer to close the popup. After that network connections are restored. This is a huge inconvenience and now I have to work with ESET firewall disabled. How can I turn off this behavior?

I have both versions - V8 on my desktop and V9 on the laptop. According to the NetFlow statistic collected from my router V9 sends a lot more data back to ESET servers. I have all related options disabled but still there is traffic. I don't know what it sends and this bothers me. That is why I don't want to update to V9 on the computer that has a lot of sensitive info.

Thank you for trying to bring political correctness into the software development business. Except... I wrote my first program for a "system" based on КР580ИК80 (8080) CPU with 1 kilobyte of RAM. That was 31 years ago. Now I am working with 8 bit microcontrollers equipped with 2-32 KB of ROM and 256-1024 bytes of RAM. In my opinion, programmers which do not care how much RAM their programs are using just too young to work on serious projects. I guess we can just close this topic as it seems that ESET people are not going to take a look at the memory dump that I sent to them. And this is ok as I prefer them to fight viruses first leaving other issues at the end of the list. It is easier for me to add another 16 GB of RAM to my computer than to change the proven antivirus engine.

oops, too late (2 answers before I sent mine). Read on nonetheless if you have the 108 MB ".rar" still... a definite no. Well done. If you have a Dropbox account, you could proceed as described here, https://forum.eset.com/topic/7274-eset-ss9-huge-memory-leak-with-outlook-2016/#entry40499, or, untested, so take the necessary precautions, you could upload it here, https://labstack.com/up,when uploaded proceed as mentioned above already. Whether using Dropbox, LabStack or any other 3rd party service think about privacy, ie. a memory dump, especially a complete memory dump, shouldn't go unsecured over the internet (no 'https') to ESET. (Ie. you should encrypt the compressed file locally on your PC and upload this. And PM the password too of course.) The primary question on the other hand is if you effectively have a memory leak. It could be a memory leak with higher probability, if and only if the memory size of ekrn.exe goes up and never (significantly) down. On my Win7 PC, ESS V9.0.349.0, memory size is between 180 - 437 MB. Thus 606 MB seems to be a little bit high, but ... Conclusion: check the memory size of ekrn.exe immediately after starting your PC / laptop, after every AV update, every half hour, and before shutting your PC / laptop down. And try to correlate with what you h oops, too late (2 answers before I sent mine). Read on nonetheless if you have the 108 MB ".rar" still... a definite no. Well done. If you have a Dropbox account, you could proceed as described here, https://forum.eset.com/topic/7274-eset-ss9-huge-memory-leak-with-outlook-2016/#entry40499, or, untested, so take the necessary precautions, you could upload it here, https://labstack.com/up,when uploaded proceed as mentioned above already. Whether using Dropbox, LabStack or any other 3rd party service think about privacy, ie. a memory dump, especially a complete memory dump, shouldn't go unsecured over the internet (no 'https') to ESET. (Ie. you should encrypt the compressed file locally on your PC and upload this. And PM the password too of course.) The primary question on the other hand is if you effectively have a memory leak. It could be a memory leak with higher probability, if and only if the memory size of ekrn.exe goes up and never (significantly) down. On my Win7 PC, ESS V9.0.349.0, memory size is between 180 - 437 MB. Thus 606 MB seems to be a little bit high, but ... Conclusion: check the memory size of ekrn.exe immediately after starting your PC / laptop, after every AV update, every half hour, and before shutting your PC / laptop down. And try to correlate with what you have done. Thank you. I uploaded the old process dump to one of my hostings and will try to notify Marcos. But now I am thinking that since I will have to renew my license in less than a month anyway and this time it will be V9 so maybe there is no point in investigating this issue.

Thank you for the instructions. But it kind of kills the point of creating a memory dump. Instructions require a restart after which for about a week EKRN.exe process will allocate pretty low amount of memory. I will have to wait for a week before I can make a dump.

I am sure other users create ekrn.exe dumps every day. But I am not that proficient yet. Could you tell me how to do it, please? And I never tried V9. When I try to update through the GUI it does not offer V9. And there is no point in reinstalling. Thank you and sorry for a late reply. Actually, don't answer that. I found a "create dump" menu item in the task manager. Now what do I do with it? It is too big to post it here (108 MB compressed with rar). Well, should I just shut up and go away with my problem. Seems nobody cares. And EKRN.EXE consumed 606 MB of RAM already.

I am sure other users create ekrn.exe dumps every day. But I am not that proficient yet. Could you tell me how to do it, please? And I never tried V9. When I try to update through the GUI it does not offer V9. And there is no point in reinstalling. Thank you and sorry for a late reply. Actually, don't answer that. I found a "create dump" menu item in the task manager. Now what do I do with it? It is too big to post it here (108 MB compressed with rar).

I am sure other users create ekrn.exe dumps every day. But I am not that proficient yet. Could you tell me how to do it, please? And I never tried V9. When I try to update through the GUI it does not offer V9. And there is no point in reinstalling. Thank you and sorry for a late reply.

So far ESET 8.0.319.0 seems like a winner of the memory eating contest on my computer. Right now it's working set is 514 MB. It would be ok except when I run SQL server (allowing it to take 12 GB out of 16) and with other programs taking some RAM I do see too much swapping. Any advice would be appreciated. Task manager screenshot is attached. D.