Huge memory usage of ekrn.exe process

[Haresh2015 3]

Our Customer using EEPA 400 users license and facing issue huge memory usage of ekrn.exe process in ESET File Security.

Approx. 15-16 GB memory consumption by ekrn.exe process and also pause all ESET Protection one-by-one, but same issue.

 

ESET Product : ESET File Security v.7.0.12018.0

Operating System : Microsoft Windows Server 2012 R2

 I have collected Procmon and ESET Log Collector logs and uploaded here.

 

https://drive.google.com/file/d/1X-fVPX7MCb8sAfQKx5UtpOoRpNQRcwES/view?usp=sharing

 

So please check issue and do needful as soon.

Edited May 17, 2019 by Haresh2015

[elikatz 0]

Having almost the exact same issue!

We have a case open with ESET but in the meantime we downgraded to version 6.5 because it was causing so many issues on our PROD SQL server.

(I also have a post here)

[Peter Randziak 1,130]

Hello guys,

can you please check if the issue persists as we fixed few memory leaks in modules, which are currently available on the pre-release update channel so please switch to it, update, reboot the system and observe the situation.

In case the issue persist, just let us know, so we can troubleshoot it with you.

Regards, Peter

Edited June 19, 2019 by Peter Randziak
info about pre-release added.

[elikatz 0]

Hello Peter,

When will these fixes be released as part of a new version?

Thanks,

Eli

[Marcos 5,070]

Modules are independent of new installers (for instance, consumer products come without modules bundled and they are downloaded after activation). We're gonna start releasing the Antivirus and antispyware module 1553 gradually to all users soon, probably within this week.

[elikatz 0]

Hi Marcos,

Thanks for the quick reply.

Assuming we are running our own ESMC on site, will it get those modules updates from ESET automatically?

Once it does, will it push it to the clients? or do we need to initiate a module update?

Thanks,

Eli 

[Marcos 5,070]

Module updates are fully automatic. Once released, clients will get it automatically without your intervention.

Since it will be released in batches, it may happen that some clients will get it a bit earlier than the others.