How do I stop ekern from running???

Discussion in 'ESET NOD32 Antivirus' started by Mark_Phelps, Mar 30, 2010.

Thread Status:
Not open for further replies.
  1. rockshox

    rockshox Registered Member

    Joined:
    Oct 23, 2009
    Posts:
    261
    Your original posts states you have a Windows 7 32-bit laptop. Is this a new laptop that came with Windows 7? or did you upgrade from Vista/XP? or do a clean install of Windows 7?
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    The statistics show files which are accessed by the oper. system or other applications. It does not necessarily mean they are scanned, especially with all protection modules disabled (in that case, ekrn might scan only files from an on-demand or startup scan).

    If you've tried disabling the startup scan tasks in Scheduler and ekrn spikes CPU though, please create a process dump of ekrn (in Windows Vista and newer this can be accomplished via the task manager right-click context menu) and convey it to ESET for perusal. Just let me know when done and I'll provide you with further instructions.
     
  3. Mark_Phelps

    Mark_Phelps Registered Member

    Joined:
    Dec 8, 2005
    Posts:
    38
    This is an original XP-era tablet PC on which I clean-installed Windows 7.
     
  4. Mark_Phelps

    Mark_Phelps Registered Member

    Joined:
    Dec 8, 2005
    Posts:
    38
    I've got Windows Task Manager open and there is no right-click "Context Menu" other than one that lists window functions (i.e., Minimize, Maximize, Close). I see nothing that indicates creating a process dump -- and I'm in the Processes tab.
     
  5. Mark_Phelps

    Mark_Phelps Registered Member

    Joined:
    Dec 8, 2005
    Posts:
    38
    Hey guys, it's been nearly 24 hours since I replied and no one has responded.

    I can't keep having this machine freeze several times a day due to ekern hogging the CPU.

    If I can't get some more instructions, I'll have no choice other than to remove NOD32 and try something else. I need to get my machine back.
     
  6. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,963
    Location:
    Somethingshire
    I the Process tab highlight/click the item (whatever .exe) first then use right click for submenu. Did you try latest Eset version>
     
  7. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    I assume that you're using default settings (ie. advanced heuristics and runtime packers disabled on file access).

    As for generating a process dump, you can accomplish it on Windows Vista and newer as shown in the screenshot below:
     

    Attached Files:

  8. Mark_Phelps

    Mark_Phelps Registered Member

    Joined:
    Dec 8, 2005
    Posts:
    38
    OK ... thanks for the details. I have the .dmp file. How do I get that to you folks?
     
  9. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,871
    @Marcos - why does your image show up 32bit Eset on a 64bit machine?
     
  10. Waterfox

    Waterfox Registered Member

    Joined:
    Mar 3, 2008
    Posts:
    118
    Location:
    Sweden

    Answered here
     
  11. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,871
    aha, thanks. so its a 32bit part which comes with the 64bit installation and makes no difference for the usage!?
     
  12. Mark_Phelps

    Mark_Phelps Registered Member

    Joined:
    Dec 8, 2005
    Posts:
    38
    I've created the .dmp file -- days ago -- and am still waiting for instructions.
     
  13. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    PM sent.
     
  14. Mark_Phelps

    Mark_Phelps Registered Member

    Joined:
    Dec 8, 2005
    Posts:
    38
    I uploaded the compressed file to ESET yesterday. Can someone at least confirm that ESET got the upload?
     
  15. Mark_Phelps

    Mark_Phelps Registered Member

    Joined:
    Dec 8, 2005
    Posts:
    38
    OK, it's Wednesday morning here and no one has responded from ESET to my posting or PMs regarding the uploading of the compressed file on Monday.

    I need to stop ekern from hogging my CPU, so I have no choice at this point other than to uninstall NOD32 and replace it with something else.

    IF ESET actually does examine my uploaded file and get back to me, I'll update this thread.
     
  16. windstrings

    windstrings Registered Member

    Joined:
    Oct 20, 2004
    Posts:
    337
    Something I don't think anyone had mentioned...
    Did you disable windows defender from doing any real time scanning?

    In Vista and Win7 that runs by default.
    You will need to go into control panel and turn it off under options. scroll to the bottom and turn off the option to even use it.

    If you simply turn off the service without doing this first you will get an error upon bootup "at least with windows 7" so just turning it off in control panel suffices.

    If windows defender is not turned off you are basically running two AV programs at once and they both not only scan the same file you are accessing at the same time, but they quite possibly scan each other scanning those files causing a major cpu waste and they are trying to micromanage each other.

    This may be common knowledge to most.. but sometimes the obvious is easiest to overlook.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.