Jump to content

Egui.exe hangs in Windows 7 x64 SP1 when user logs out


Recommended Posts

Hello.

When using ESET Endpoint Security 8.0.2028.0 with default settings in Windows 7 x64 SP1, there is a problem with the egui.exe process freezing when the user logs off. The problem is not seen in newer operating systems.

https://streamable.com/rnnjkd

After disabling the self-defense mechanism, the problem disappears.

https://streamable.com/hsrfvl

Request number: 0001381937

Link to post
Share on other sites

Is this a direct Win 7 sign off by the user? Or is some type of custom log off script being deployed at user sign off time?

Link to post
Share on other sites

My advice is to use Process Explorer versus Win Task Manager to get a full picture of what is going on in regards to equi.exe.

When the Eset GUI interface is not open, the following should be observed:

Eset_GUI_2.thumb.png.07c2f40933edb93268b82f64700ffe38.png

Once the Eset GUI interface is opened, the following is observed:

Eset_GUI_1.thumb.png.109171fa7021cfcb89e8924c5cda8151.png

Once the Eset GUI interface is closed and approximately 10 secs or so thereafter, equi.exe will terminate itself with the result being what is shown in the first screen shot.

In other words, equi.exe should never be running as a stand-alone process but always as a child process to the parent ekrn.exe process. The actual process that controls equi.exe current state status is equiProxy.exe.

Edited by itman
Link to post
Share on other sites
Quote

Go to Event Viewer->Applications and Services Logs-> Microsoft->Windows->Diagnostics-Performance->Operational.  This will give you your boot and shutdown events.  Look for Event ID 201 or 203.

Look for shutdown events and note any that reference equi.exe.

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...