Jump to content

ESET Smart Security Premium Scheduled Scan Stuck


Recommended Posts

ESET Smart Security Premium v16.2.13.0

I have a weekly scan set to run at 01:00 on Saturday.  As at 11:20 the scan is still running and appears to be stuck on a particular file: C:\windows\system32\ctfmon.exe  See the attached screenshot.

Any ideas?

ESET SS Premium Scan.jpg

Link to comment
Share on other sites

  • Administrators

Please narrow it down by scanning folders one by one and then file by file in the particular folder. Once you have found the troublesome file, supply it to me in a password protected archive.

Link to comment
Share on other sites

Hi Marcos.  I don't think you've read my post fully as the file in question is listed in the text and shown in the screenshot; cftmon.exe, a Windows file.  Having rebooted ESET scans the file fine in isolation.  I'll run a further full scan to see what happens.

Link to comment
Share on other sites

I just ran an on demand scan of;

Quote

Log
Scanned disks, folders and files: C:\Windows\System32\

and the scan completed w/o issue.

One possibility here is ctfmon.exe is corrupted and this is what is causing the scheduled scan to hang.

Also, odd and notable is the posted scan log only shows 2748 objects were scanned. My log entry for the C:\Windows\System32\ directory alone shows 15701 objects scanned. This leads me to believe that the scan is not hanging on ctfmon.exe

Edited by itman
Link to comment
Share on other sites

  • Administrators
4 hours ago, Skier said:

I don't think you've read my post fully as the file in question is listed in the text and shown in the screenshot; cftmon.exe, a Windows file. 

I did but I assumed that the issue would not occur if you scanned only ctfmon.exe or c:\windows\system32. If you are able to reproduce it, please raise a support ticket. Most likely a dump of ekrn.exe will be needed to find out what file was being scanned or what was going on.

Link to comment
Share on other sites

One other possible source for this Eset scan hang activity.

Are using another AV or security product that has its real-time scanning component enabled? Doing so could be the source of this hang.

Link to comment
Share on other sites

20 hours ago, itman said:

I just ran an on demand scan of;

and the scan completed w/o issue.

One possibility here is ctfmon.exe is corrupted and this is what is causing the scheduled scan to hang.

Also, odd and notable is the posted scan log only shows 2748 objects were scanned. My log entry for the C:\Windows\System32\ directory alone shows 15701 objects scanned. This leads me to believe that the scan is not hanging on ctfmon.exe

The screenshot was taken when the scan was hung.  The animation was present but that doesn't come across in a screenshot.  The small number of files scanned in the System32 directory was because it was hung up part way through.

Link to comment
Share on other sites

I am still of the opinion that one or more corrupted files exist in the C:\Windows\System32\ directory.

Open an admin level command prompt window and enter the following;

sfc /scannow

When the scan completes which will take a while, you will be informed if corrupted /missing system files were discovered and if recovery of those were successful.

If corrupted files were discovered and recovered, now repeat a scan of C:\Windows\System32\ directory. Hopefully, it will complete sucessfully.

Edited by itman
Link to comment
Share on other sites

I've already run the System File Checker command - no issues.  A manual scan completed earlier today without issue so I'll have to put it down to a transient issue.

To answer your earlier question as to whether I run another AV or security solution; I do, Malwarebytes.  I've run the two side-by-side for years without issue but do add exclusions to each of them.  I think that's been since 2006/7 since Windows Vista became available in 64-bit.

Link to comment
Share on other sites

1 hour ago, Skier said:

To answer your earlier question as to whether I run another AV or security solution; I do, Malwarebytes.

My take on this is the Eset scheduled/on-demand scan lockup will continue to manifest on an intermittent basis.

The recommended Eset and MBAM exclusions for each other are to prevent real-time scanning conflicts. It can be assumed when Eset is running a full device scan, it is performing file access and control methods different from that performed in real-time scan mode.

Link to comment
Share on other sites

22 hours ago, itman said:

My take on this is the Eset scheduled/on-demand scan lockup will continue to manifest on an intermittent basis.

This is the first I've ever seen in what I think is around 16/17 years of using the two side-by-side.  I don't believe a conflict between ESET Smart security Premium and Malwarebytes is the issue but can't be certain.  Even if it is, an issue once every decade (or more) isn't a justification for ceasing using both products.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...