mjb 0 Posted October 14, 2017 Share Posted October 14, 2017 Hi I have recently being getting very slow logon and shutdown form my windows 10 machine. Sometimes the internal data drive (where my desktop , userprofile etc are stored) was not being detected. When it was detected i checked in task manger and noticed that the drive was running at !00%. further investigation showed this to be caused by the eset service. I tried making exceptions to files where i store photos etc in the real time protection. This made no difference. I then disabled local drives removable, media, network drives and scan on computer shutdown from real time file system protection and then retested. Startup of windows and shutdown were now lightning fast again like they used to be. Therefore my conclusion is that real time file system protection is causing this issue. However i don't want to just turn this off and then have to go turn it on every time after the machine has started up. There must be a reason for this behaviour. How can i track down work out why its doing this? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,259 Posted October 14, 2017 Administrators Share Posted October 14, 2017 This could happen if you have diagnostic logging enabled or you have a rule in HIPS, firewall or Web Control created that logs too many records (e.g. every visited website, every operation blocked by HIPS, etc.). Please provide me with ELC logs as well as with a Procmon boot log as per https://support.eset.com/kb6308. Link to comment Share on other sites More sharing options...
mjb 0 Posted October 14, 2017 Author Share Posted October 14, 2017 (edited) Thanks for your help i have just sent you a pm with the logs. by the way there were no logs in hips and none in any of the others for today. apart from the virus signatures being updated. Edited October 14, 2017 by mjb Link to comment Share on other sites More sharing options...
Recommended Posts