Jump to content

Huge memory usage of ekrn.exe


gordom
 Share

Recommended Posts

Hello Everyone.
I have Eset Endpoint Antivirus ver. 5.0.2122.17 installed on my PC (Win XP) and for some time I’m facing a problem with huge memory consumption of ekrn.exe process. It reaches 500 MB - 1 GB and even more (without any scanning or updating going on in the background). It seems that memory usage slowly but systematically rises, because just after starting up a system ekrn.exe uses around 130MB only. There is no difference if Eset is temporally disabled. Turning it off doesn’t take any effect and memory usage still rises.

My computer works very slowly and unstably and BSoDs occur from time to time. I would appreciate any clues how to fix the problem.

Regards,
 

Link to comment
Share on other sites

  • Administrators

Please create a complete application memory dump by running "procudmp -ma ekrn" (Procdump can be downloaded from https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx). When done, compress the dump, upload it to a safe location and pm me the download link.

Link to comment
Share on other sites

Please create a complete application memory dump by running "procudmp -ma ekrn" (Procdump can be downloaded from https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx). When done, compress the dump, upload it to a safe location and pm me the download link.

 

Thank you very much for your answer. I did as you said. The link was sent to your mailbox. Kind regards,

Link to comment
Share on other sites

  • Administrators

Endpoint 5.0.2122.17 is way too old and seems that it has never been released officially. Please install the latest v5.0.2260 and see if it helps.

Link to comment
Share on other sites

Endpoint 5.0.2122.17 is way too old and seems that it has never been released officially. Please install the latest v5.0.2260 and see if it helps.

 

I did more less what you said and have installed most recent version of Endpoint. However it’s not a mentioned by you v5.0.2260, but v6.3.2016.1. Unfortunately symptoms persist. Memory usage slowly grows and after few hours exceeds 500MB. I dumped process as previously and uploaded to the remote location. Direct link was sent to your PM.

Regards,

Edited by gordom
Link to comment
Share on other sites

I have seen this issue with Windows XP only. Go into services and disable the windows automatic update service. You might as well have this disabled as you are running XP. See if this helps. 

Link to comment
Share on other sites

  • 2 weeks later...

I have seen this issue with Windows XP only. Go into services and disable the windows automatic update service. You might as well have this disabled as you are running XP. See if this helps. 

 

I did what you said and turned an automatic update service off. Unfortunately huge memory consumption still persists :(.

 

Link to comment
Share on other sites

I've noticed , that this problem occurs when you download files through web browser (checked it with firefox and opera).

I would bet that Endpoint keeps downloaded files (or part of it) in memory.

Link to comment
Share on other sites

when you download files through web browser (checked it with firefox and opera).

 

What do you mean exactly? Are you talking about any file that is downloaded by web browser while browsing a web (i.e. html and any other web content files)? Or do you mean strictly "external" files (e.g. pdf, doc etc.)?

Edited by gordom
Link to comment
Share on other sites

Hard to say.

Html files are too small to notice anything suspicious.

I've noticed it happens when big binary files (size: 50-1500MB) are downloaded.

Link to comment
Share on other sites

...

I've tested html files. I've opened over 100 of them. After that ekrn.exe grow bigger about 40-50MB.

It could be coinsidence. Maybe something else have done it

Edited by lapto007
Link to comment
Share on other sites

Hard to say.

Html files are too small to notice anything suspicious.

I've noticed it happens when big binary files (size: 50-1500MB) are downloaded.

 

So it’s rather not my case. My web browser is opened permanently indeed (all day long) and ekrn.exe utilizes more and more RAM during a day, but it happens regardless of downloading any big binary files. In other words, there is no need to download anything to notice this.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...