Jump to content

ESET File Server Security using 30-60% cpu on terminal server

Recommended Posts

  • Administrators

Please install the Windows ADK (https://docs.microsoft.com/en-us/windows-hardware/get-started/adk-install).

When you notice a high CPU utilization by ekrn.exe, enable logging by running the following as an administrator:

wpr -start GeneralProfile -start Minifilter -filemode

After not more than 5 minutes, stop logging by running:
wpr stop EsetPerf.etl


Next compress EsetPerf.etl, upload it here or to a safe location, if too big and drop me a pm with a download link.

Link to comment
Share on other sites

Thanks for the fast response - unfortunately I wasn't able to run ADK while the issue was occurring.

Had to reinstall EFSW overnight as this is a critical server - looks like CPU usage is back down to 0-6% now, but it would be good to know if you have any ideas of what might have caused this.

We have over 70 users on this server, and this problem last happened 3 months ago on a clean install of EFSW.

Is there anything you can tell from the ESET logs I sent you by PM?

Any help is greatly appreciated - thanks!

Link to comment
Share on other sites

  • Administrators

WPR from ADK should be installed before the issue occurs. When the issue is already manifesting, you just run the above command to generate an etl log. Without the log or an ekrn dump it's impossible to tell the cause of the issue.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...