elikatz 0 Posted May 1, 2019 Share Posted May 1, 2019 Hello, We are seeing an issue on a Windows 2016 server running SQL 2016 - current memory usage is 5.8GB growing around 2MB an hour. ESET product is ESET File Security version 7.0.12018.0, Server up time is 5 days. We are seeing similar issues on other servers running SQL, different server which don't run SQL are using much less memory. Is there a known issue similar to this? is it a configuration issue? or an actual memory leak? Thanks! Link to comment Share on other sites More sharing options...
Administrators Marcos 5,156 Posted May 1, 2019 Administrators Share Posted May 1, 2019 If it's not ekrn.exe or egui.exe process that consume much memory, it's unlikely that the problem would be caused by ESET. Link to comment Share on other sites More sharing options...
elikatz 0 Posted May 1, 2019 Author Share Posted May 1, 2019 It is ekrn.exe: Link to comment Share on other sites More sharing options...
Administrators Marcos 5,156 Posted May 1, 2019 Administrators Share Posted May 1, 2019 It is weird that Windows Defender (msmpeng.exe) is running. This service should not run after you install ESET and real-time protection gets activated. Try uninstalling EFSW and installing it from scratch. Make sure that the above process is not among running processes then. If you notice that ekrn is consuming too much memory, in the advanced setup -> Tools -> Diagnostics select the full application dump from the menu and then click OK. Then click Create (dump) in the same window to generate a compete application dump of ekrn. Finally gather logs with ESET Log Collector, upload the generated archive to a safe location and drop me a message with a download link. I would also recommend raising a support ticket and providing them with the generated archive as well. Link to comment Share on other sites More sharing options...
elikatz 0 Posted May 1, 2019 Author Share Posted May 1, 2019 We didn't realized Defender was running, we are going to work on disabling it across the board. Please note that we noticed the memory issue only on SQL servers at this point, we didn't check all the environment, so probably Defender is not the cause. I'm going to pick another SQL server which is having the issues and generate all the logs you requested shortly. Thanks! Link to comment Share on other sites More sharing options...
elikatz 0 Posted May 2, 2019 Author Share Posted May 2, 2019 Can you please DM me your email address so I can share the logs and dumps with you? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,156 Posted May 2, 2019 Administrators Share Posted May 2, 2019 In order to send a private message to someone, just hover the mouse cursor over his or her nick and click Message: Link to comment Share on other sites More sharing options...
elikatz 0 Posted May 2, 2019 Author Share Posted May 2, 2019 I sent you a private message with the link yesterday 🙂 Link to comment Share on other sites More sharing options...
elikatz 0 Posted May 7, 2019 Author Share Posted May 7, 2019 BTW, we tried uninstalling and reinstalling and after 2 days ekrn.exe is already using 1.4GB (it was ~20MB 2 days ago) Link to comment Share on other sites More sharing options...
elikatz 0 Posted May 16, 2019 Author Share Posted May 16, 2019 We had to downgrade ESET File Security on the SQL server back to 6.5, we have a case open with ESET trying to figure what's wrong but we can't operate in such unstable environment, we are even considering looking for a different solution... Link to comment Share on other sites More sharing options...
elikatz 0 Posted May 31, 2019 Author Share Posted May 31, 2019 Is anyone else having the same issue? We have a case open with ESET and they seem to identify the issue but asking us to generate more dumps and logs - we were wondering if we are the only ones having these issue... Link to comment Share on other sites More sharing options...
Recommended Posts