Huge memory usage of ekrn.exe

[gordom 0]

Hello Everyone.
I have Eset Endpoint Antivirus ver. 5.0.2122.17 installed on my PC (Win XP) and for some time I’m facing a problem with huge memory consumption of ekrn.exe process. It reaches 500 MB - 1 GB and even more (without any scanning or updating going on in the background). It seems that memory usage slowly but systematically rises, because just after starting up a system ekrn.exe uses around 130MB only. There is no difference if Eset is temporally disabled. Turning it off doesn’t take any effect and memory usage still rises.

My computer works very slowly and unstably and BSoDs occur from time to time. I would appreciate any clues how to fix the problem.

Regards,
 

[Marcos 5,074]

Please create a complete application memory dump by running "procudmp -ma ekrn" (Procdump can be downloaded from https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx). When done, compress the dump, upload it to a safe location and pm me the download link.

[gordom 0]

Please create a complete application memory dump by running "procudmp -ma ekrn" (Procdump can be downloaded from https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx). When done, compress the dump, upload it to a safe location and pm me the download link.

 

Thank you very much for your answer. I did as you said. The link was sent to your mailbox. Kind regards,

[Marcos 5,074]

Endpoint 5.0.2122.17 is way too old and seems that it has never been released officially. Please install the latest v5.0.2260 and see if it helps.

[gordom 0]

Endpoint 5.0.2122.17 is way too old and seems that it has never been released officially. Please install the latest v5.0.2260 and see if it helps.

 

I did more less what you said and have installed most recent version of Endpoint. However it’s not a mentioned by you v5.0.2260, but v6.3.2016.1. Unfortunately symptoms persist. Memory usage slowly grows and after few hours exceeds 500MB. I dumped process as previously and uploaded to the remote location. Direct link was sent to your PM.

Regards,

Edited April 23, 2016 by gordom

[tmuster2k 22]

I have seen this issue with Windows XP only. Go into services and disable the windows automatic update service. You might as well have this disabled as you are running XP. See if this helps. 

[gordom 0]

I have seen this issue with Windows XP only. Go into services and disable the windows automatic update service. You might as well have this disabled as you are running XP. See if this helps. 

 

I did what you said and turned an automatic update service off. Unfortunately huge memory consumption still persists .

 

[lapto007 0]

I've noticed , that this problem occurs when you download files through web browser (checked it with firefox and opera).

I would bet that Endpoint keeps downloaded files (or part of it) in memory.

[gordom 0]

when you download files through web browser (checked it with firefox and opera).

 

What do you mean exactly? Are you talking about any file that is downloaded by web browser while browsing a web (i.e. html and any other web content files)? Or do you mean strictly "external" files (e.g. pdf, doc etc.)?

Edited May 10, 2016 by gordom

[lapto007 0]

Hard to say.

Html files are too small to notice anything suspicious.

I've noticed it happens when big binary files (size: 50-1500MB) are downloaded.

[lapto007 0]

...

I've tested html files. I've opened over 100 of them. After that ekrn.exe grow bigger about 40-50MB.

It could be coinsidence. Maybe something else have done it

Edited May 11, 2016 by lapto007

[gordom 0]

Hard to say.

Html files are too small to notice anything suspicious.

I've noticed it happens when big binary files (size: 50-1500MB) are downloaded.

 

So it’s rather not my case. My web browser is opened permanently indeed (all day long) and ekrn.exe utilizes more and more RAM during a day, but it happens regardless of downloading any big binary files. In other words, there is no need to download anything to notice this.