dans 0 Posted January 7, 2014 Share Posted January 7, 2014 We are currently using ESET Endpoint v. 5.0.2225.0 on windows 7 64 bit SP1. NOrmally, we have no issues but when we open Nuuo NuClient to view our facility cameras, ESET begins to use more and more processing. I have added the NUUO directory to the exclusions, and tried turning off the Antivirus scanners and real time protection prior to opening Nuuo but ekrn.exe will still peg the processors. Sometimes around 60% but usually it jumps to 99% and stays there. Even when I close the Nuuo client, ekrn.exe continues to use the processing power and can only be reset by a reboot. If I don't open the camera program, ekrn.exe never pegs out like this. I do not see any indications in the logs available thru the client. We didn't have this issue with 4. My machine is two 4 core procs with 8GB of ram and others are having this issue too. Any suggestions? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,290 Posted January 7, 2014 Administrators Share Posted January 7, 2014 Does disabling protocol filtering in the advanced setup make a difference? Is the video streamed via http? Link to comment Share on other sites More sharing options...
dans 0 Posted January 7, 2014 Author Share Posted January 7, 2014 Hi Marcos and thank you for replying. Initially I had the client listed under the excluded applications and SSL scanning was off. I tried turning off protocol filtering completely and it seems to have fixed the issue. So I rebooted and turn it back on but then added the IP of the camera server to the exclusion list as well. So far it seems to work. I will test again tomorrow on the other machines and then post back on the status. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,290 Posted January 8, 2014 Administrators Share Posted January 8, 2014 Please carry on as follows: 1. Enable generation of complete application memory dumps in the main setup under Tools -> Diagnostics. Reproduce the problem and check if dumps are created in C:\ProgramData\ESET\ESET Endpoint Security\Diagnostics. 2, Enable logging to pcap as per the instructions I'll send you in a personal message. Also download Procdump and extract it to the disk. When you notice high cpu utilization by ekrn.exe, run "procdump -ma ekrn" with elevated admin rights. We'll need to get the dumps and logs for further analysis. Link to comment Share on other sites More sharing options...
Recommended Posts