View Full Version : Vista x64 scans do not complete
Maxwel
March 10th, 2009, 08:37 PM
I have installed build 684 of NOD32 v3 onto a new laptop running Vista Home Premium x64. Scans do not complete. A scan of C:\Users stops at 41% with the last target being C:\Users\Default\Local Settings. Despite no further scan progress, ekrn.exe continues to use ~30% of the cpu. Any ideas?
Flyer00
March 10th, 2009, 11:09 PM
Following these steps fixed it for me:
http://kb.eset.com/esetkb/index?page=content&id=SOLN554&actp=search&viewlocale=en_US&searchid=1236740840973
Maxwel
March 11th, 2009, 09:38 AM
That doesn't help. Doing the same for C:\User\Default doesn't help either. Also my log files are always empty.
Marcos
March 11th, 2009, 09:43 AM
Maybe enabling logging all files or using Process Monitor and checking operations performed by ekrn would reveal which files are being scanned.
Maxwel
March 11th, 2009, 09:57 AM
{QUOTE-> Maybe enabling logging all files or using Process Monitor and checking operations performed by ekrn would reveal which files are being scanned. <-QUOTE}
How do you enable logging all files?
Maxwel
March 11th, 2009, 02:09 PM
Ok, I have the same problem with NOD32 v4. It appears the the scanner is hanging on entities like C:\Users\Default\Local Settings which appear as shortcuts and in XP are special folders. I get "access denied" when I click on them. I'm trying to include them from the scan.
Maxwel
March 11th, 2009, 04:20 PM
THese entities are symlinks that now point to nothing because I've uninstalled a lot of the junk that came with the laptop. I'm stunned that this isn't a common occurrence. Is there another solution besides telling NOD32 not to scan them?
Marcos
March 11th, 2009, 05:13 PM
{QUOTE-> Ok, I have the same problem with NOD32 v4. It appears the the scanner is hanging on entities like C:\Users\Default\Local Settings which appear as shortcuts and in XP are special folders. I get "access denied" when I click on them. I'm trying to include them from the scan. <-QUOTE}
Have you run Process Monitor from Microsoft to verify that the scan actually stucks at these folders and not on others where lots of files may reside and thus scanning that folder takes more time?
Maxwel
March 11th, 2009, 07:39 PM
{QUOTE-> Have you run Process Monitor from Microsoft to verify that the scan actually stucks at these folders and not on others where lots of files may reside and thus scanning that folder takes more time? <-QUOTE}
I set up a scan of C:\Users\Default and then executed Process Monitor. The latter reports that ekrn.exe is repeating the same operations on the path C:\Users\Music over and over again. All report success except for the open which reports Fast IO Disallowed. NOD32 reports the target is C:\Users\Local Settings and 46%. It is slowly using up my 4GB of memory.
Marcos
March 11th, 2009, 07:47 PM
{QUOTE-> I set up a scan of C:\Users\Default and then executed Process Monitor. The latter reports that ekrn.exe is repeating the same operations on the path C:\Users\Music over and over again. <-QUOTE}
What files reside in the C:\Users\Music folder? Do you store mp3 or wma files there?
Maxwel
March 11th, 2009, 08:58 PM
{QUOTE-> What files reside in the C:\Users\Music folder? Do you store mp3 or wma files there? <-QUOTE}
I mistyped. It's C:\Users\Default\Music. It's another empty symlink.
vBulletin® Copyright ©2000-2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums