kamiran.asia 5 Posted December 29, 2018 Share Posted December 29, 2018 (edited) Hi dears, We find that tmp files that is related to EKRN is generating in large size lacated C:\windows\temp When realtime Protection is disabled , we can delete these files. After one month we have over 800 GB of these files in Temp that we delete it manually. But These two tmp files deleted just when AV is paused. ESET Log Collector Reprt : https://wetransfer.com/downloads/b38b6e8c69b5f603d6c870ec4e8cf02520181229110903/600f969d657b55244a06a72aa948247e20181229110903/bad081?utm_campaign=WT_email_tracking&utm_content=general&utm_medium=download_button&utm_source=notify_recipient_email What are these tmp files and how can we prevent them to busy storage ? Edited December 29, 2018 by kamiran.asia Link to comment Share on other sites More sharing options...
Administrators Marcos 5,234 Posted December 29, 2018 Administrators Share Posted December 29, 2018 I assume that excluding d:\platereader\camera1\remotelpr.exe from protocol filtering will do the trick. If that works, stop the process remotelpr.exe, enable advanced network protection and protocol filtering logging in the advanced setup -> Tools -> Diagnostics and then run remotelpr.exe. Make sure it generates http traffic. After 20-30 seconds, disable advanced logging, gather fresh logs with ELC and supply them to me for perusal. Link to comment Share on other sites More sharing options...
kamiran.asia 5 Posted December 30, 2018 Author Share Posted December 30, 2018 16 hours ago, Marcos said: I assume that excluding d:\platereader\camera1\remotelpr.exe from protocol filtering will do the trick. If that works, stop the process remotelpr.exe, enable advanced network protection and protocol filtering logging in the advanced setup -> Tools -> Diagnostics and then run remotelpr.exe. Make sure it generates http traffic. After 20-30 seconds, disable advanced logging, gather fresh logs with ESET Log Collector and supply them to me for perusal. Marcos , Perfect as Always Link to comment Share on other sites More sharing options...
Recommended Posts