100% CPU Usage

I too am having a similar 100% CPU usage issue. However I'm having this particular issue with Media Player Classic when I'm opening a video file. The computer will remain at 100% usage for roughly 20 or so seconds on file open (the file size is ~300MB). ~100MB files open in roughly 3 or so seconds. Something strange that I noticed is that MKV files opened rather fast despite their size (ie a 0.99GB MKV opened in a few seconds) but AVI files suffer tremendously. From what I see, the AVI files are using ffdshow for both audio/video decoding.

Using FileMon, I see that a file that is repeatedly accessed by ekrn is C:\Program Files\Common Files\Ahead\DSFilter\NeVideo.ax

In fact, on some additional searching, I found this which is practically identical to my issue. I am using Nero OEM 6.6.1.15. I haven't tried any other version of Nero since I don't have access to those.

I've attached a log of FileMon (opens the file, waiting for file to load, playing for 20 seconds, and close). CPU remains at 100% till only near the end of the 20 seconds play. View attachment Filemon_Log_NeVideo.ax.txt

With the real-time protection disabled, this doesn't occur. Please advise on what I can do or if you need additional information.

EDIT: I would like to note that adding that particular file to the exclusion list does provide a "temporary" fix but I'd rather have as few exceptions as possible.

3.2GHz Pentium 4 / 1GB RAM
Windows XP SP3
NOD32 3.0.667.0
CCCP using the included Media Player Classic.

 

hey marcos. Could the cpu type have anything to do with the 100%?

 

This may be old news but I found by excluding the files in the article quoted below it greatly speeded up my computer at startup and when usinging Windows update.

from: http://support.microsoft.com/kb/822158/

For computers that are running Windows Server 2003, Windows 2000, Windows XP, or Windows Vista

Do not scan the following files and folders. These files are not at risk of infection. If you scan these files, serious performance problems may occur because of file locking. Where a specific set of files is identified by name, exclude only those files instead of the whole folder. Sometimes, the whole folder must be excluded. Do not exclude any one of these based on the file name extension. For example, do not exclude all files that have a .dit extension. Microsoft has no control over other files that may use the same extensions as the following files.

• Microsoft Windows Update or Automatic Update related files

• The Windows Update or Automatic Update database file. This file is located in the following folder: %windir%\SoftwareDistribution\Datastore

Exclude the Datastore.edb file.

• The transaction log files. These files are located in the following folder:
%windir%\SoftwareDistribution\Datastore\Logs

Exclude the following files:• Edb*.log

Note The wildcard character indicates that there may be several files.

• Res1.log
• Res2.log
• Edb.chk
• Tmp.edb

 

i guess this was causing the 100%cpu....anyone test it yet?

 

Please try excluding "log" extension from scanning to see if it makes a difference for you.

 

This is perfect, MrBrimi, since I did what you said, everything is workin perfectly! Ekrn is not hoggin my processor anymore. That was close, because I was on my way to delete the Antivirus, after being one of its hardest defender.

Thanks again!

 

I checked my settings, and for the Extensions options, the "scan all files" is NOT checked. Looking through the default list and .log is not listed. That probably explains why I am not having any 100% cpu problems currently (Vista 32 Home Prem with 3.0.669).

Maybe not selecting "scan all files" should be the default?

 

da studio computer is so far stable since tha recent update. I need to check the extentions. cpu is normal here. Im gonna try it at home. wish me luck.

 

i was thinking of creating a new thread. but its a update...anyway ma cpu usage seems normal so far at home, even with extension(note i hav not been using eset due to dis 100% cpu issue). I have tried both with da extension .log and without, cpu is normal. Same machine same specs...jus a new xp install.

Anyway here is another problem, even tho i doubt its nothing new. I recently got a ipod to charge from one of ma girlfriends, it had viruses. Eset find and deleted all. thinking that was it i restart into vista which had a different anti virus program and it pop saying there 2 virus on the ipod. Thinking it jus came on it from some where, i note the files and i restarted to xp and ran a another scan with eset...nothing.....right click and scan the two files ...eset said nothing. Here is a screen shot for proof ....and i also sent the 2 files for testing on virustotal.com, heres tha anaysis ~VT links removed per Policy. - Ron~ can sumone tell what is going on the two files names are data system.exe and data maurice.exe has seen in da imagine attached
http://img228.imageshack.us/my.php?image=dvwl7.jpg

 

I was using Eset nod32 3.0.669.0 and I had no problems of what so ever regarding CPU usage. Today I upgraded to the newest version and 100% CPU usage.

I am going to try to exclude the files someone mentioned behind, but is there a valida reason of why this happens?

At the moment I have it disabled and the computers works like a charm.

 

This is stilla problem for me, but will try mrbrimi's suggestion below in the morning.

 

It worked for me. Thanks!

It seems I talked to soon. It still uses 100% of my CPU. It just stops using 100% of the CPU, if I disable the active protection and then reactivate it again.

Now, does Eset have a clue of why it happens? It seems it happens to alot of people.

I wonder why the new version uses 100% of my CPU, considering that the previous version didnt.

 

no 100% cpu here....so far

 

Same results...so far so good...mrbrimi extra exclusions seems to work!
This topic should be pinned by a mod.

 

I have the freeze bug, too.
I want install download imgburn, install it and use it but I can't. My pc freeze when NOD32 3.0.672.0 is running. When I disable it, I can use imgburn.

My firefox freeze after any download, too.
The erkn.exe runs with 100% CPU time.

I have Windows XP SP3 with all updates.
Pentium IV 3.2GHz HT
2GB RAM DDRII

No other antivirus programs installed. The exclusion doesn't work. When I start imgburn, which is on my exclusion my PC freezed.

 

I have the same issue with imgburn. I have to temporarily disable the AV to run the program.

 

Does the problem disappear after excluding ImgBurn.exe from scanning? The thing is it takes time to unpack it as the unpacked file is 8 times larger than the packed one that is installed.

 

Interestingly , I use ImgBurn on a laptop with XP Pro SP3 , ESS 3.0.672 , I use it regularly and have no issues , no slow downs , no problems.
However , the processor is dual core , not a single core .

 

i wish eset nod32 would do all da exclusions automatically rather than the user. It should be smart enough to know the difference between a regular app or a virus causing the 100% cpu and kno how to fix dem. I mean look at it this way, I'm in Jamaica and if i gave my friend dis and it cause a slow down....he would:

1. Tell me its my fault y his system moving so slow and try to kill me

2. say the antivirus is crap and its the virus

3. seek a free alternative and find a next technician....

u kno jamaicans, once its not working like it should or causing a problem, get rid of it.

come now stop release lil fixes and release sumting big in the nex version!!WE LUV U and JUS FIX DA KNOWN PROBLEMS TO BECOME NUMBER1

 

This would mean we'd have to get all exisiting and future not yet existing executable files in the world with high runtime compression which is, as you understand, impossible. Unless you enable advanced heuristics/runtime packers on file access intentionally, you should not have a problem accessing such files.

 

well take notes from this thread. Its clear that the exclusion for .log files work. Either add it automatically or make nod do less scanning on it. For advanced heuristics i would only enable to detect future threats early.All im saying 100% cpu never use to a occur, so y now? what change soo much?

 

I have used NOD a long time. When I first started, Eset was a small antivirus company. Now they are much bigger and it seems that the most important thing is the bank account. A lot of customers are having problems ,so they tell them to turn off the protection that is supposed to be a selling point of NOD. How would you feel if your car would shut off when you made a right turn and as a fix the manufacturer told you to stop turning right?

 

Advanced heuristics is a sophisticated, performance/time intensive emulator that is able to reveal new threats by running them in a virtual environment. For this reason, it's disabled by default for on-access scanning, but having it enabled for newly created/modified files (by default) provides perfect protection against new threats, accomplanied by in-depth scans perfomed by the web/email and startup scanners.

Advanced heuristics could only be used for newly created/modified files in v2. In v3, we wanted to give the option to enable AH on access for those who don't mind delays when accessing certain files for the first time. It's easy to remove this option as it was with v2 if people are used to enable it and then complain about performance hits, but I don't think that's the way to go. Everyone should have the option to tailor the program to their needs.

 

If I were you I would remove that option and make it as it was in v2 . Most of the people in this forum I have seen have touched the settings and then complain . Actually it is not NOD32 the guilty but the users who have touched where they don't understand.

 

Are you sure?