prixone 8 Posted October 30, 2019 Share Posted October 30, 2019 (edited) After Today's update where 2 modules were updated, nod 32 antivirus is making my PC hang in a lot of actions like using the taskbar or firefox. Would there be a way to revert this last update temporally until the issue is fixed? As far as I remember it was only 2 modules that were updated Today 30, Oct. Detection Engine: 20266 (20191030) Rapid Response module: 15157 (20191030) After these 2 were updated my life became hell. Edited October 30, 2019 by prixone Link to comment Share on other sites More sharing options...
deiwas9 0 Posted October 30, 2019 Share Posted October 30, 2019 (edited) Me too , task bar not responding almost at all times , something happening with this new version . Pc usage goes to 100%. (that happens only if i use bittorent app) Edited October 30, 2019 by deiwas9 Link to comment Share on other sites More sharing options...
itman 1,630 Posted October 30, 2019 Share Posted October 30, 2019 Switch to pre-release updates and see if that helps. Link to comment Share on other sites More sharing options...
prixone 8 Posted October 30, 2019 Author Share Posted October 30, 2019 (edited) pre-release updates did not help, it mainly happens with firefox when I have anything set to open after download for example a PDF, or Image or anything else. Will try to use the rollback feature. never mind after going pre-release I no longer have the option to rollback great now im royal screwed... Edited October 30, 2019 by prixone Link to comment Share on other sites More sharing options...
itman 1,630 Posted October 30, 2019 Share Posted October 30, 2019 Forget rollback. Just switch back to regular updates if you prefer. Link to comment Share on other sites More sharing options...
prixone 8 Posted October 31, 2019 Author Share Posted October 31, 2019 I had a rollback before using pre-release like you told me to, after going pre-release and back to regular I no longer have the option to rollback 24 hours like I had the option, which would have solved my issue temporally at least, if rollback does what I think it does. I just hope I won't have to move to another antivirus until I see a fix from eset like I had to last time... very frustrating. Link to comment Share on other sites More sharing options...
prixone 8 Posted October 31, 2019 Author Share Posted October 31, 2019 (edited) I don't know how the rollback works but before going pre-release I had a drop down that would let me choose 12hours, 24 hours, etc and that would be enough to re-roll the update of these 2 modules if that is what the rollback would have done, thus temporally fixing my current issue, since it started happening only after I've received that update. Regular modules: Detection Engine: 20266 (20191030) Rapid Response module: 15157 (20191030) Pre-release modules: Detection Engine: 20269P (20191030) Rapid Response module: 15160P (20191030) Still causing the issue in both modes, would help if I could go back 24 hours with the modules. Edited October 31, 2019 by prixone Link to comment Share on other sites More sharing options...
Most Valued Members peteyt 388 Posted October 31, 2019 Most Valued Members Share Posted October 31, 2019 9 hours ago, prixone said: I don't know how the rollback works but before going pre-release I had a drop down that would let me choose 12hours, 24 hours, etc and that would be enough to re-roll the update of these 2 modules if that is what the rollback would have done, thus temporally fixing my current issue, since it started happening only after I've received that update. Regular modules: Detection Engine: 20266 (20191030) Rapid Response module: 15157 (20191030) Pre-release modules: Detection Engine: 20269P (20191030) Rapid Response module: 15160P (20191030) Still causing the issue in both modes, would help if I could go back 24 hours with the modules. Only thing i can suggest is opening a support ticket via email Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted October 31, 2019 Administrators Share Posted October 31, 2019 Does pausing real-time protection make a difference? What about uninstalling ESET and installing it from scratch with default settings? Link to comment Share on other sites More sharing options...
prixone 8 Posted October 31, 2019 Author Share Posted October 31, 2019 (edited) 2 hours ago, Marcos said: Does pausing real-time protection make a difference? Yes, that stops firefox from having deadlock and lets me use the taskbar as intended, while its not desired to have it turned off, its something that started happening with recent update that was not happening before. 2 hours ago, Marcos said: What about uninstalling ESET and installing it from scratch with default settings? No, that didn't help. Edited October 31, 2019 by prixone Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted October 31, 2019 Administrators Share Posted October 31, 2019 Please reproduce the issue with Procmon running and advanced output enabled in the Procmon menu as per https://support.eset.com/kb6308/. When done, save the log, compress it, upload it here or to a safe location along with logs collected with ESET Log Collector and provide me with download links. Link to comment Share on other sites More sharing options...
itman 1,630 Posted October 31, 2019 Share Posted October 31, 2019 I am using FireFox on ver. 13.0.22 with zip issues. There is a bug in the latest Firefox release that is impacting some users: https://www.bleepingcomputer.com/news/software/mozilla-provides-workaround-for-firefox-70-not-loading-sites/ Link to comment Share on other sites More sharing options...
deiwas9 0 Posted October 31, 2019 Share Posted October 31, 2019 For me today everything goes fine , no more lagging . Maybe some fix came out ? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted October 31, 2019 Administrators Share Posted October 31, 2019 2 minutes ago, deiwas9 said: For me today everything goes fine , no more lagging . Maybe some fix came out ? None that we would be aware of. Link to comment Share on other sites More sharing options...
deiwas9 0 Posted October 31, 2019 Share Posted October 31, 2019 Then idk what happened . Everything was like prixone mentioning , eset HIPS reacting with firefox downloads and torrent downloading which caused pc lagging for me. Link to comment Share on other sites More sharing options...
prixone 8 Posted October 31, 2019 Author Share Posted October 31, 2019 Will post an update as soon as I get home with the logs. Link to comment Share on other sites More sharing options...
prixone 8 Posted October 31, 2019 Author Share Posted October 31, 2019 8 hours ago, Marcos said: Please reproduce the issue with Procmon running and advanced output enabled in the Procmon menu as per https://support.eset.com/kb6308/. When done, save the log, compress it, upload it here or to a safe location along with logs collected with ESET Log Collector and provide me with download links. After the modules update Today, it now only hangs with torrent files every other file now work as expected. Detection Engine: 20274P (20191031) Rapid Response module: 15165P (20191031) Will update with logs in a few... Link to comment Share on other sites More sharing options...
prixone 8 Posted October 31, 2019 Author Share Posted October 31, 2019 (edited) I've sent the procmon logs privately to you Marcos, for anyone else trying to test what is going on, here is a way to reproduce my current issue: By going to the game website www.priston.com.br then hover over "BAIXAR AGORA!" and then you should get a torrent option to download the game "client completo via torrent" Once I click it it will deadlock and hang firefox, until the download popup asking if I want to save or open the file with an application shows up. I don't even need to open torrent or download the file, to get this issue. Simple clicking the torrent link is enough to make it all hang. And that is a legitimate game torrent file for a game that is widely played in Brazil. Edited October 31, 2019 by prixone Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted November 1, 2019 Administrators Share Posted November 1, 2019 uTorrent is known to cause problems with v13. Since it's detected as a potentially unwanted application, we cannot exclude it internally from deep scanning. Try replacing uTorrent with another torrent client. Or exclude utorrent.exe from scanning, ie. add C:\Users\%USER%\AppData\Roaming\uTorrent\uTorrent.exe in the performance exclusions. kanok ramsint 1 Link to comment Share on other sites More sharing options...
Most Valued Members Nightowl 198 Posted November 1, 2019 Most Valued Members Share Posted November 1, 2019 21 hours ago, prixone said: I've sent the procmon logs privately to you Marcos, for anyone else trying to test what is going on, here is a way to reproduce my current issue: By going to the game website www.priston.com.br then hover over "BAIXAR AGORA!" and then you should get a torrent option to download the game "client completo via torrent" Once I click it it will deadlock and hang firefox, until the download popup asking if I want to save or open the file with an application shows up. I don't even need to open torrent or download the file, to get this issue. Simple clicking the torrent link is enough to make it all hang. And that is a legitimate game torrent file for a game that is widely played in Brazil. Switch to Deluge/Qbittorrent , they don't include ads or toolbars, both are open-source. kanok ramsint 1 Link to comment Share on other sites More sharing options...
deiwas9 0 Posted November 2, 2019 Share Posted November 2, 2019 (edited) 9 hours ago, Rami said: Switch to Deluge/Qbittorrent , they don't include ads or toolbars, both are open-source. Man you're magician , deluge downloads torrent with speed i never seen before on my pc ;D Also ESET doesn't interfere with it. Edited November 2, 2019 by deiwas9 Link to comment Share on other sites More sharing options...
prixone 8 Posted November 3, 2019 Author Share Posted November 3, 2019 (edited) On 11/1/2019 at 4:41 AM, Marcos said: uTorrent is known to cause problems with v13. Since it's detected as a potentially unwanted application, we cannot exclude it internally from deep scanning. Try replacing uTorrent with another torrent client. Or exclude utorrent.exe from scanning, ie. add C:\Users\%USER%\AppData\Roaming\uTorrent\uTorrent.exe in the performance exclusions. I like nod32 a lot but you guys every once in awhile sh1t it so hard, that is frustrating and then just say "we can't do anything", when its literally on your side the issue. You literally had something that was working, broke it, and are like "oh we don't care about it, just use something else". I just hope I won't have to take the same action I had to do before and move away from nod32 again, hopefully there will be a fix for this issue in the couple next days, if not oh well time to look for a new AV again... Thanks anyway. Edited November 3, 2019 by prixone Link to comment Share on other sites More sharing options...
Administrators Marcos 4,935 Posted November 3, 2019 Administrators Share Posted November 3, 2019 We didn't brake anything. Advanced Machine Learning was added in v13 which also contributes to the said performance problem. You could theoretically disable AML but you don't need to do that since it's much safer to exclude the particular file than the whole protection feature. The issue is specific to utorrent, the way it is packed and unpacked on execution. We are not aware of such issues with any other applications. Link to comment Share on other sites More sharing options...
Most Valued Members Nightowl 198 Posted November 3, 2019 Most Valued Members Share Posted November 3, 2019 23 hours ago, deiwas9 said: Man you're magician , deluge downloads torrent with speed i never seen before on my pc ;D Also ESET doesn't interfere with it. You are welcome , I do use Deluge also , it's far better than uTorrent and doesn't have all of the adware that uTorrent tries to add. Link to comment Share on other sites More sharing options...
Most Valued Members peteyt 388 Posted November 3, 2019 Most Valued Members Share Posted November 3, 2019 10 hours ago, prixone said: I like nod32 a lot but you guys every once in awhile sh1t it so hard, that is frustrating and then just say "we can't do anything", when its literally on your side the issue. You literally had something that was working, broke it, and are like "oh we don't care about it, just use something else". I just hope I won't have to take the same action I had to do before and move away from nod32 again, hopefully there will be a fix for this issue in the couple next days, if not oh well time to look for a new AV again... Thanks anyway. As said just exclude utorrent and it should be fine Link to comment Share on other sites More sharing options...
Recommended Posts