Dun

It is not very unusual to have issues with latest version of web browsers running in sandbox. That is one of the reasons why I mentioned Firefox ESR and sandboxie 1.4.2 (currently next to last SBIE version)

I created new discussion on Sandboxie Github https://github.com/sandboxie-plus/Sandboxie/discussions/2383 as well

Sandboxie-Plus 1.2.0 introduced new feature: "Use a Sandboxie login instead of an anonymous token". However, enabling it prevents HTTPS websites loading. Further explanations how "Use a Sandboxie login instead of an anonymous token" works: https://github.com/sandboxie-plus/Sandboxie/discussions/2064 Sandboxie developer DavidXanatos asked to create a thread there asking ESET developers to look at the issue. He suggested that there might be an old workaround applied on your security software for the old Sandboxie versions: https://github.com/sandboxie-plus/Sandboxie/issues/2025#issuecomment-1196343325 Original issue posted on the open-source Sandboxie repository: https://github.com/sandboxie-plus/Sandboxie/issues/2025 Requirements to reproduce the issue: - Operating system: Windows 11 22H2 // Windows 10 Enterprise LTSC 2021 x64 (21H2) (10.0.19044.1806) - Sandboxie Plus 1.4.2 // 1.2.0 x64 - ESET Endpoint Security 9.1.2060.0 // Eset Internet Security 15.2.11.0 x64 - Firefox 102.4.0esr x64 // Microsoft Edge 106.0.1370.52 x64 Firefox shows PR_END_OF_FILE_ERROR, Microsoft Edge ERR_CONNECTION_CLOSED error Steps to reproduce: 1) Install Firefox, Edge, Sandboxie 1.2.0 or newer, ESET and make sure SSL scanning is enabled. Firefox download: https://www.mozilla.org/en-US/firefox/enterprise/#download Microsoft Edge download: https://www.microsoft.com/en-us/edge/business/download?form=MA13FJ Sandboxie download: https://github.com/sandboxie-plus/Sandboxie/releases/ 2) Run Edge/Firefox in any sandbox and visit any HTTPS webpage to confirm it will load correctly 3) Close all sandboxed apps 4) Run Sandman -> Options -> Global settings -> Advanced config -> Enable 'Use a Sandboxie login instead of an anonymous token' 5) Run Edge/Firefox in any sandbox and visit any HTTPS webpage to confirm it will NOT load correctly Due to this incompatibility issue, since Sandboxie versions 1.2.7 the "Use a Sandboxie login instead of an anonymous token" is disabled by default.

This has not been fixed:

I would like to find simple way of stopping all files in a specific folder accessing/communicating with the web. I have worked how to do it for specific .exe files but it is laborious doing it for several. Any ideas appreciated.

https://forum.eset.com/topic/23723-after-enabling-virtual-machine-feature-the-pc-bsod-every-start/?do=findComment&comment=114743

Rename C:\Windows\System32\drivers\eamonm.sys in safe mode (I also renamed C:\Program Files\ESET\ESET Security\Drivers\eamonm\eamonm.sys) in safe mode, start in normal mode, revert changes, upgrade as per guide. Works fine

Thank you for your support. However the issue is very easy to reproduce with smart security or internet security and I have already provided way to much unnecessary information about my computer

I was able to narrow down the issue. Take huge executable file and create firewall rule about it. Make sure to enable it. When you click ok to apply settings you will see it will take much much longer than usually. But this is not yet the cause of the 100% core usage by ekrn.exe. After that create any other firewall rule and enable it. When applied - there you go, CPU core is fully utilized and network is unusable. To revert it, just disable (do not delete) the rule about huge size of the executable file. If you will not disable the problematic rule then after 15-30 minutes the CPU usage will go down but raise again hours later for some reason. Also it will raise at computer startup and waking up from sleep mode. Please let me know when you can fix it

Please check PM. Should I provide the esetperf.etl as well?

I forgot to mention that if I restart my machine network protection does not work. It takes over 10 minutes to calm down the cpu usage by ekrn.exe, then the protection lights green. Please find logs in PM.

Hello Whenever I change Eset Endpoint or Eset Internet Security from default to custom, I notice ekrn.exe uses 100% of one of cpu cores for 20 minutes. It happens when I start any application which connects to the internet like Chrome or VPN. It does not happen with default settings. All settings I change is do not clean malware if found in files and ask the user, network settings to public network and block couple apps in firewall. It does not matter if I do it with Endpoint or Internet Security or if I change settings manually or import configuration file. Event log does not show any errors. It started happening after windows updates 3 weeks ago. What should I do about it?

I also had issue with firewall which started with delay of 20 minutes. After repairing .net framework and restarting the computer, everything went fine this time

Google Chrome is up to date Version 80.0.3987.149 (Official Build) (64-bit) I can not provide logs. Eset causes so high cpu usage I can not move mouse properly. Every app hangs completely. It also breaks my internet connection. Not sure if I should see eset component/driver in network card properties How can downgrade to EIS 13.x previous build?

Same problem. Latest Eset internet security build cause the issue