How long does a startup scan take?

Discussion in 'ESET NOD32 Antivirus' started by grun93, Aug 11, 2010.

Thread Status:
Not open for further replies.
  1. sloana

    sloana Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    2
    I have to join in. Also, the same problem. Happens before windows update, and still happening after the update.

    And it seems this is not the only problem. If I tried to do a manual scan, it's always stuck at scanning operating memory (someone already opened up another thread for this one).

    Hope there's a solution soon, and it's just a bug, not a virus.


    Windows 7 64 bit Ultimate Edition EN
    4.2.40.0 / 5358 (20100811)

    Update: The latest update (5361) seems to have fixed it.
     
    Last edited: Aug 12, 2010
  2. jimwillsher

    jimwillsher Registered Member

    Joined:
    Mar 4, 2009
    Posts:
    667
    Give the guys at ESET a chance. The patches only came out yesterday, and they don't get the patches any quicker than you do. So all these comments "fix it soon" or "why no statement from ESET" are a bit harse IMHO.



    Jim
     
  3. DooGie

    DooGie Registered Member

    Joined:
    Jul 1, 2006
    Posts:
    112
    The same happening here.
    I only noticed it after the latest virus sig update 5358. In fact the thing that first alerted me was my CPU idle temperature jumping up by 6º C for no reason.
    Looking at task manager I saw that ekrn was using 25% of CPU resources.

    Running Windows 7 x64, NOD32 4.2.58.3.
     
  4. DC187

    DC187 Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    2
    Same issue after updating to 5358, have called ESET who said they are unaware of any issues.
     
  5. c2d

    c2d Registered Member

    Joined:
    Sep 26, 2007
    Posts:
    572
    Location:
    Bosnia
    Eset will surely solve this issue...
    Just be patient and disable startup scan for now...
     
  6. 3one5

    3one5 Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    5
    I've had the startup scan running for hours now on my Exchange Server. Looks like ekrn.exe has brought the Exchange Server to its knees twice this morning. ekrn.exe is sitting at a constant 50% CPU utilization. This all started after an update at 3:22 am to Version 5357. Not real happy right now!
     
  7. MegaKott

    MegaKott Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    1
    I tried the CrashOnCtrlScroll method and although my comp did crash it didn't do a memory dump, the screen just went black. So, sorry to say I can't help you with a crash dump.

    I'm running Win7 64-bit (updated with all patches released, incl those that came yesterday) together with Nod32 version 4.2.58.3 and virus-db 5358 and have the same problem with the startup scan not finishing. Turning off Anti-stealth helps though.
     
  8. pbcopter

    pbcopter Registered Member

    Joined:
    Jun 23, 2009
    Posts:
    5
    Same problem for me. Started this morning.
    Windows 7 x64
    4.2.58.3 / 5358
     
  9. jimbobaloo

    jimbobaloo Registered Member

    Joined:
    Jan 18, 2004
    Posts:
    11
    Location:
    Michigan, USA
    same issue here. endless startup scan.
     
  10. CPAPerseus

    CPAPerseus Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    1
    Add my name to the list.

    4.0.424.0/5358

    Windows 7/ i7 920

    Core 1 permanently @ 86%


    Just Updated to 64 bit (version: 4.2.58.3 / 5359) with same results.

    Also, starting a scan produces the same stuck result - stuck scanning Operating Memory
     
    Last edited: Aug 11, 2010
  11. 3one5

    3one5 Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    5
    Eset is aware of the issue and working on a fix. Temp fix that we were given is as follows.

    -Turn off scanning of memory in startup scanner

    -Turn off Antistealth (AS)

    As we discussed, these changes will require a reboot of the ESET server.
     
  12. Insane_Homer

    Insane_Homer Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    4
    seems to be a 64-bit OS problem
     
  13. Leschy

    Leschy Registered Member

    Joined:
    Sep 23, 2007
    Posts:
    55
    Location:
    Munich
    I guess you are right!
     
  14. Insane_Homer

    Insane_Homer Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    4
    New sig 5359, can any confirm is this has solved the problem...?
     
  15. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    We have been trying to reproduce this problem on fully updated Win7 x64 systems to no avail.

    Anyways, we're about to revert the Anti-Stealth module to the previous version shortly (in fact, it will show as build 1021). A computer restart will be required for the module to get loaded. The Anti-Stealth module 1020 will remain on pre-release servers as it had been there for a couple of weeks without any problems reported by any of dozens of thousands users who downloaded it.

    Please if you can and are able to reproduce the problem, enable pre-release updates, reproduce the problem and generate a complete memory dump per the instructions here. When you have the dump ready, let me know so that I can provide you with further instructions.
    We appreciate your cooperation in advance.
     
    Last edited: Aug 11, 2010
  16. jimbobaloo

    jimbobaloo Registered Member

    Joined:
    Jan 18, 2004
    Posts:
    11
    Location:
    Michigan, USA
    problem fixed by latest module and def update. Kudos to Eset!
     
  17. Leschy

    Leschy Registered Member

    Joined:
    Sep 23, 2007
    Posts:
    55
    Location:
    Munich
    Updated to virus definitions 5359, "download prerelease updates" is NOT ticked. Startup Scan runs with an end, but, there is no flashing in the tray icon. I only see the date of finishing the startup scan under tools -> scheduler.
     
  18. picomanico

    picomanico Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    19
    Yes, ESET shows anti-stealth module version 1021 with 5359 update. (without pre-release updates disabled)
     
  19. cool1007

    cool1007 Registered Member

    Joined:
    Oct 19, 2009
    Posts:
    57
    I'm sorry if I ask something stupid... I have updated my virus definition to v. 5359, with the pre-release option unticked. The start up scan is still going and it's not stopping... Do I need to restart my computer? Or should I tick the pre-release option in order to fix this?

    Thank you,
     
  20. Leschy

    Leschy Registered Member

    Joined:
    Sep 23, 2007
    Posts:
    55
    Location:
    Munich
    Updated to 5359 without prerelease updates sucessfully. Eset shows anti-stealth module 1021. But, as I said, there is no flashing, when a start up scan is in progress. So what brings, if "prelease updates" is ticked. Flashing?

    EDIT: Ok sorry, forget about the flashing. I created a new task for startup scan, which scans "all registered files" (should take a little bit longer) and yes, flashing is shown.

    But still the question: What brings if "enable prerelease updates" is ticked especially for this problem.

    Last but not least: THANKS Eset, for the fast response and help, nice job!!

    gn8 everybody!
     
    Last edited: Aug 11, 2010
  21. DooGie

    DooGie Registered Member

    Joined:
    Jul 1, 2006
    Posts:
    112
    I can confirm that the problem is now fixed on my PC.

    Cheers for the fast work ESET :)
     
  22. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    Enabling pre-release updates will dowload the problematic Anti-Stealth module 1020 which improves rootkit protection. Our goal is to pinpoint the issue and provide a fixed version of the module for testing as soon as possible. Whoever can generate complete memory dumps from the problematic state, please do so and provide it to ESET (drop me a PM once you have a dump ready).
    The weird thing is that tens of thousands of users had downloaded module 1020 from pre-release servers in recent weeks and nobody reported issues that emerged after today's update.
     
  23. DooGie

    DooGie Registered Member

    Joined:
    Jul 1, 2006
    Posts:
    112
    Marcos I started a similar thread a couple of weeks ago which could be related https://www.wilderssecurity.com/showthread.php?t=278471
     
  24. oxocube

    oxocube Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    2
    I have one computer that had the issue, and the other didn't, both 64 bit Win7 with the latest Windows updates, strange.
     
  25. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    Unfortunately, there was no indication that the Anti-stealth module could be the culprit. There's a sticky thread about reporting issues, one of the steps is to confirm or deny that the problem persists with default settings. Now I've added another step - to try disabling Anti-spam and Self-defense, one at a time and restarting the computer. This will surely help us narrow down potential issues in the future.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.