Jump to content

Scan memory but zero object be scanned


sdnian

Recommended Posts

I try to scan memory with "In-depth scan". But no object be scan, the log show "Number of scanned objects: 0". It's all using default settings. I don't change any settings after install EEA.

 

OS: Windows 7 Ultimate SP1

 

ESET Endpoint Antivirus v6.2.2021.0

 

Virus signature database: 12519 (20151105)
Rapid Response module: 6962 (20151105)
Update module: 1060 (20150617)
Antivirus and antispyware scanner module: 1472 (20150930)
Advanced heuristics module: 1162 (20150923)
Archive support module: 1239 (20150929)
Cleaner module: 1114 (20151004)
Anti-Stealth support module: 1083 (20150819)
ESET SysInspector module: 1254 (20150924)
Real-time file system protection module: 1010 (20150806)
Translation support module: 1411.3 (20151009)
HIPS support module: 1203 (20151026)
Internet protection module: 1226 (20151005)
Database module: 1072 (20150831)
Configuration module (33): 1055.4 (20150914)
LiveGrid communication module: 1020 (20150807)

 

post-990-0-59668100-1446720310_thumb.pngpost-990-0-74215400-1446720318_thumb.png

Link to comment
Share on other sites

  • Administrators

1, Make sure that the In-depth scan profile doesn't have Smart optimization enabled (should be disabled by default for this profile).

2, Run a scan as administrator.

Link to comment
Share on other sites

1, Make sure that the In-depth scan profile doesn't have Smart optimization enabled (should be disabled by default for this profile).

2, Run a scan as administrator.

 

I've check the settings. "Enable Smart optimization" is off in the In-Depth profile. And I click "Scan as Administrator" button to start scanning. Any other suggestion? Thank you.

 

And I've uninstall and install EEA couple times. It's the same result.

 

post-990-0-30538700-1446727107_thumb.png

Edited by sdnian
Link to comment
Share on other sites

I try to test this issue in different Windows. All 32bit OSs have not this issue. It always has a number in the 'Number of scanned objects'. Below OS I've tested.

 

Windows XP SP3 32bit 

Windows 7 SP1 32bit 

 

But all 64bit OSs have the exact issue. Below OS I've tested.

 

Windows 7 SP1 64bit

Windows 8.1 64bit

Windows 10 64bit

Windows Server 2008 64bit 

 

So I wonder it's a bug. Could ESET confirm it?

 

And I found a more eccentric thing. Before I scan memory, if I have to launch other programs, for example IE, notepad++, it could show a number.

 

The screenshots in the below.. I do it on the same computer (Windows 7 SP1 x64). But you can see one have 74 objects be scanned, but another is zero. The only difference is one has to launch notepad++, another has not.

 

post-990-0-94803800-1446788267_thumb.pngpost-990-0-51630800-1446788273_thumb.png

 

 

Why?

Link to comment
Share on other sites

Maybe it just happened in VM. I test it with VirtualBox (Host: Ubuntu 14.04 / 15.10, Windows 7 SP1) and Proxmox. Both have the same issue. 

Link to comment
Share on other sites

  • Administrators

I'd suggest creating a Process monitor log from the time of the scan and supplying it to Customer care for further assistance. You can also drop me a pm with a download link to the log so that I can check it out myself too.

Link to comment
Share on other sites

  • 2 months later...
  • Administrators

Could you run IE x86 (not x64) before running a memory scan? If possible, try installing home v9 for a while just to see if it makes a difference.

Link to comment
Share on other sites

Could you run IE x86 (not x64) before running a memory scan? If possible, try installing home v9 for a while just to see if it makes a difference.

 

According you mention IE x86.. I do some test and I am more clear about this issue. In Windows 64-bit OS, if no any x86 process in memory, to use EEA scans memory, it will get zero object being scanned. I've tested to run 7-zip x64 and Chrome x64 before EEA runs scanning. The EEA scan result still is zero objects. But ESET NOD32 Antivirus 9.0.349 has no this situation. Whatever any x86 process exists, it always no show zeroes object being scanned.

Link to comment
Share on other sites

  • Administrators

 

Could you run IE x86 (not x64) before running a memory scan? If possible, try installing home v9 for a while just to see if it makes a difference.

 

According you mention IE x86.. I do some test and I am more clear about this issue. In Windows 64-bit OS, if no any x86 process in memory, to use EEA scans memory, it will get zero object being scanned. I've tested to run 7-zip x64 and Chrome x64 before EEA runs scanning. The EEA scan result still is zero objects. But ESET NOD32 Antivirus 9.0.349 has no this situation. Whatever any x86 process exists, it always no show zeroes object being scanned.

 

 

That explains it. V9 is the first ESET product which uses a native x64 ekrn.exe. The situation will change once x64 ekrn.exe makes it to Endpoint in some of the future versions.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...