ESET Internet Security, updates hang up, as well as sites like Windows Update

[Bummer Man 0]

I am at a complete loss here. I have ESET Internet Security for Win7 64bit Ultimate, all the latest updates and whatnot - running on version 11.1.54.0 and I've noticed just within the few past days that my internet connectivity has gone all wonky. TLS handshakes take a suspiciously long time, and so forth. And, the main problem is, that ESET does not update itself when I click on the update button. I've tried all the possible solutions as far as uninstalling and re-installing the entire program. This is just B.S., people. I mean, once ESET and its firewall etc is on, I cannot even access Windows Update, for crying out loud!

The only other antivirus/antimalware software I have running on my PC is a registered version of Malwarebytes Premium 3.5.1 (which, by the way, wouldn't update either, when ESET was installed).

I've now spent around 20+hrs trying to troubleshoot this issue, following ALL the possible different instructions that there's been on ESET's help pages or in the forums, uninstalled and reinstalled the software for at least three times, trying to use both the online installer and the offline installer, gone thru all the help pages that there are as well as imaginable forum posts, and still, the problem is: whenever I click on update, it gets stuck on that, and the whole thing is clogging up my internet traffic as well. Talk about man in the middle!

And, the problems with ESET's internet traffic filtering/firewall have been known for YEARS. I.e. this post is from 2016:

https://forum.eset.com/topic/7791-eset-blocking-entire-internet-access/

I'm really ready to jump ships away from this antivirus software that I've bought and paid for and used for years.

So, please advise on this issue. I will provide any additional information that is needed.

Thank you. Have a nice day.

Edited June 30, 2018 by Bummer Man

[Marcos 5,074]

MBAM with its real-time protection driver clashes with ESET. If you want to use it in tandem with ESET, use it as an offline scanner without its drivers being loaded.

For troubleshooting, I'd recommend removing MBAM at least temporarily.

The best would be if you could provide a complete memory dump from the point when the issue occurs by manually generating a crash as per https://support.eset.com/kb380.

[COStark26 10]

Marcos, I've used EIS w/Mbam for a long time BUT Have the Mbam Exemptions in ESET that were suggested by Mbam Forum Moderators.

One is System 32 \Drivers\mbam.sys. Is THAT really of any help?

Should OP try the List suggested by Mbam ?

 

    C:\Program Files\Malwarebytes\Anti-Malware\assistant.exe

    C:\Program Files\Malwarebytes\Anti-Malware\malwarebytes_assistant.exe

    C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

    C:\Program Files\Malwarebytes\Anti-Malware\MbamPt.exe

    C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

    C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

    C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe

    C:\Windows\system32\Drivers\farflt.sys

    C:\Windows\System32\drivers\mbae64.sys

    C:\Windows\System32\drivers\mbam.sys

    C:\Windows\System32\drivers\MBAMChameleon.sys

    C:\Windows\System32\drivers\MBAMSwissArmy.sys

    C:\Windows\System32\drivers\mwac.sys

 

  C:\Program Files\Malwarebytes\Anti-Malware

    C:\ProgramData\Malwarebytes\MBAMService      

[Marcos 5,074]

I don't think that excluding any files or folders in ESET would prevent possible clashes. When troubleshooting issues, the only way how to 100% confirm or rule out involvement of a particular sw in the issue is by temporarily uninstalling it.

[TomFace 539]

I used to use MBAM alongside ESS (now EIS) without any trouble what-so-ever for years (Win 7 x64 machine). That was until MBAM v3 came out (which MBAM is touting as an A/V program replacement).

I have tried to use them together many times without success as there were always issues when MBAM was introduced. So even though I have a lifetime MBAM license, in its current state, I cannot/will not use it.   

I agree with Marcos as to the exclusions/uninstall for testing. Then you may need to choose one over the other.

Edited July 1, 2018 by TomFace

[SCR 195]

Like TomFace I also have a life time license with MBAM and can not, will not, use it. Most all my issues developed after v3.x was released and are described by the OP. I tried subsequent releases of MBAM but still had to many problems on my otherwise smooth running Windows 7 x64 Pro machine and my Windows 7 x64 Premium machine. 

I have an aversion to setting exclusions for anything in EIS. (Formerly ESS). However, having said that I did give the exclusions described by COStark26 a go. I also set exclusions in MBAM for EIS. While the problems were less pronounced I still had unacceptable issues both constant and intermittent. With MBAM not running and using it as a secondary scanner only  issues still presented themselves simply because it was installed. After I completely removed the MBAM install with their clean tool and did a clean EIS install I haven't had any issues on either machine.

MBAM provides some protections already in EIS. Given the issues MBAM has had in the past, the resources used by MBAM along with the never ending issues introduced with updates to the program I decided to go with my resource lean, reliable, tried and true install of EIS. It should be noted that I did not remove EIS to try MBAM as the only protection install. Simply put I don't trust MBAM to protect my systems nor do I want to waste my time with their development issues. My only reason for having MBAM installed initially was for a second opinion scanner. Back in the v1.x days it worked perfectly and I purchased my life time license to support the program. In v2.x some problems developed but were manageable. When v3.x was released it all went down hill immediately for me.

The only way the OP will know for sure is to remove MBAM completely. Do a fresh install of the chosen Eset product and see if the issues are resolved. If the problems are resolved then the OP can remove Eset and try using a clean install of MBAM to insure there are no problem. I can't help feeling that there will be issues with MBAM only, but as I said I never tried for the reasons stated. 

As TomFace has said the OP is more then likely going to have to pick one or the other for a trouble free OS

Edited July 1, 2018 by SCR

[TomFace 539]

Should the OP decide to totally remove MBAM, here's a link to their MBAM Clean Removal Process 2.x.

The OP should read the instructions completely as the tool will remove ALL MBAM data (including license information).

https://forums.malwarebytes.com/topic/146017-mbam-clean-removal-process-2x/

As far as a 2nd opinion on-demand scanner is concerned (should one be desired), I use HitmanPro, not HitmanPro.Alert. The enhanced HitmanPro.Alert (just like MBAM v3) causes (me) issues when using ESET.

But again, it is the users call. This is not meant to be (or construed as) an A vs. B vs. C comparison, an endorsement or slam of any particular product or brand and what works for one user may not work for another.

Edited July 1, 2018 by TomFace

[SCR 195]

4 hours ago, TomFace said:

But again, it is the users call. This is not meant to be (or construed as) an A vs. B vs. C comparison, an endorsement or slam of any particular product or brand and what works for one user may not work for another.

Well said and completely agree.

My post reflects my experience and should be taken as such along with the above from TomFace. As with any software your experience may be just fine.

However, I will endorse and recommend Eset products to anyone that asks as they have served me well and have kept my systems safe and clean for many years.

[TomFace 539]

Like SCR, I too use ESET by choice, for many years now. 

Why? Because it works for me.

Edited July 2, 2018 by TomFace

[Bummer Man 0]

OK; so what I don't get here is that how can I have been running ESET + MBAM "in tandem" (as described above in a reply) for some years now, and all the sudden I'm in this situation?

Also, MBAM has quite well blocked some threats that ESET didn't recognize at all throughout the past few years as I've used both ESET+MBAM simultaneously, so there's that ...  And, I'm not quite sure what has gone awry with the concept of having both MBAM and ESET on a computer, since things used to work out just well until the past few weeks or so.

And; on top of all this - I have a lifetime license for this particular computer for MBAM, as back in the day they were selling those. Not anymore. I'd rather not throw that one overboard.

 

 

Cheers,

 

 

 

 

Edited July 3, 2018 by Bummer Man

[TomFace 539]

What trouble shooting have you done?

Did you try uninstalling one or the other program to see where the possible cause lives?

[Marcos 5,074]

We'd need a complete memory dump from the point when the system is unresponsive to confirm it's indeed caused by  a clash with MBAM. For instructions how to configure Windows to generate memory dumps and how to initiate a system crash manually, please refer to https://support.eset.com/kb380.

[Bummer Man 0]

Well, this is odd. Just ran the latest ESET Live Installer, installed all the updates that were found and now everything seems to be working without any slowdown or hiccups. Hmm, I wonder what has happened, since the "Current version" seems to still show 11.1.54.0 (last successful update on 10.7.2018, 1:48:57, which is 10 minutes ago local time).

Here's the overall list for version numbers of the modules ;

Detection Engine: 17688 (20180709)
Rapid Response module: 12452 (20180709)
Update module: 1014 (20180123)
Antivirus and antispyware scanner module: 1539.1 (20180529)
Advanced heuristics module: 1188 (20180422)
Archive support module: 1275 (20180605)
Cleaner module: 1159 (20180612)
Anti-Stealth support module: 1138 (20180625)
Firewall module: 1378 (20180509)
ESET SysInspector module: 1273 (20180523)
Translation support module: 1680 (20180411)
HIPS support module: 1322 (20180613)
Internet protection module: 1334 (20180522)
Web content filter module: 1058 (20170406)
Advanced antispam module: 7616 (20180709)
Database module: 1098 (20180530)
Configuration module (33): 1659.4 (20180412)
LiveGrid communication module: 1045 (20180410)
Specialized cleaner module: 1012 (20160405)
Banking & payment protection module: 1135 (20180625)
Rootkit detection and cleaning module: 1019 (20170825)
Network protection module: 1675 (20180704)
Router vulnerability scanner module: 1050 (20180613)
Script scanner module: 1041 (20180627)
Connected Home Network module: 1020 (20180503)
Cryptographic protocol support module: 1028 (20180626)

 

Thanks,

 

[Bummer Man 0]

On 03/07/2018 at 3:14 AM, TomFace said:

What trouble shooting have you done?

Did you try uninstalling one or the other program to see where the possible cause lives?

Had tried installing and re-installing ESET multiple times, had tried all the available Knowledge Base solutions on how to bypass ESET from tangling up the Internet connectivity. My internet connection was basically half-jammed for days on end and only uninstalling ESET solved that problem.

After all the hassle, after a few days with ESET un-installed completely (only MBAM+Win7 Defender, of which MBAM is a software that I'd rather NOT uninstall, as I have the lifetime Premium license for it; which is not available any longer and will expire once the software is uninstalled --), I just now re-installed ESET and it seems to be working quite well. No hassle with MBAM, either. If I'm not mistaken, I could hardly reach MBAM's updates at worst.

And, on top of that, ESET wouldn't update either. The LiveGrid was down, too. I couldn't get to Windows Update, update Firefox, TLS handshakes in all browsers were laggy if not unresponsive. Pings etc run from cmd prompt were looking normal, but the TLS layer really seemed screwed up.

Dunno what has been automagically fixed now, but at least everything seems to be working. *knocks on wood*

Thanks a lot for the support so far, I was already about to throw in the towel with this issue, as I had to spend multiple days trying to fix it. One explanation would be bad timing with updates - perhaps between Windows Update, ESET and MBAM, that caused some kind of a causal effect. It's really hard to pinpoint the culprit, but all I know that without any new software installations, no shady websites, nothing, all the sudden the internet connectivity esp. over secured layers just went to oblivion. (although the ping times were completely normal at all times).

 

Edited July 9, 2018 by Bummer Man

[TomFace 539]

I'm glad your issues have subsided. As far as I know, an MBAM lifetime license does not end should you uninstall it...as I have one (and SCR I believe has one as well) and have NOT had any issues (uninstalling and re-installing) as I have tried (again and again) to run MBAM (v3) with EIS. It does not work for me (for they do not play well together since MBAM v3). So I will NOT run MBAM...paid or free.

I hope your software conflict lull last a long time, but with the combination you are using I think it will arise again.

Just my opinion, it's only a matter of time.

Good luck.

Edited July 10, 2018 by TomFace

[Bummer Man 0]

The weird thing is, that now that I reinstalled ESET and did a full scan, it found one potentially unwanted program, which was, if I'm not mistaken;

Microsoft Compatibility Telemetry.

Oh, the Irony.

[TomFace 539]

15 minutes ago, Bummer Man said:

The weird thing is, that now that I reinstalled ESET and did a full scan, it found one potentially unwanted program, which was, if I'm not mistaken;

Microsoft Compatibility Telemetry.

Oh, the Irony.

That almost sounds like some of their updates that advocated telemetry.

Here is the link concerning Microsoft Compatibility Telemetry https://support.microsoft.com/en-us/search?query=Microsoft Compatibility Telemetry

I prize my privacy...don't want/need another spy.

Take care.

Edited July 10, 2018 by TomFace

[Bummer Man 0]

Oh, this is just great. According to latest posts on Microsoft Community Forums, the CompatTelRunner.exe gets re-installed every time you run Windows Update. But that should only apply to Windows 10. I can't seem to get rid of the CompatTelRunner.exe, as "TrustedInstaller" is the only "user" with full access to the file, I've tried changing the file access policies, disabled the service, tried this, that, and the other, to no avail.

Not to mention that people are complaining CompatTelRunner hogging up their PC resources, especially in Win10, and going thru all their files.

"Windows - From OS To Spyware ..."

Even ESET couldn't remove the file because of the program's security restrictions.

EDIT: I have ran GWX Control Panel in the past and ran it again just to make sure that I have none of the Win8/Win10 pusher packages installed. The results were negative in all of them. Also, ran thru Process Explorer to make sure that the program was NOT in use. Ran all the necessary sc delete diagtrack etc commands ;

https://www.drivereasy.com/knowledge/compattelrunner-exe-high-disk-usage-in-windows-10-7-solved/#b

Tried this, that and the other. I'd rather slingshot that piece of junk into oblivion, if it is even possible anymore, thanks to the changes that Microsoft has made to elevated file access privileges in Win7.

 

Edited July 10, 2018 by Bummer Man

[AdvancedSetup 0]

Hello Bummer Man,

As long as you have a legal lifetime license and the receipt for it then yes, it will always continue to always be valid. The issue is that many unscrupulous people have illegally sold lifetime licenses derived from cracks, keygens, etc. If one of those were sold to you from places like eBay or similar then it is quite possible the license is not valid. You can contact myself or our Helpdesk if you'd like us to check on your license for verification.

Thank you

Ron, Forum Community Manager at Malwarebytes