startup scan in progress

Hi,

I have been having an issue which it looks like my startup scan is happening at different times during the day. I have been starting my computer at 7:30 AM and the startup scan is happening at different times like it just happen a moment ago and I cannot do anything in may computer CPU usage goes to 100 % and I need to wait for it to finished before I can do anything and it looks like it happening back to back I check on the schedule and it shows two entries I guess it is supposed to scan too after an update. But this was not happening to me with the previous version 4.0.474 it just started to happen when I upgraded to 4.2.40.

Any ideas ?

Thanks
jdelgado

 

Same here, started with 4.2.40. Startup scan happens randomly and takes 100% of one core and no way to stop it. I let go for 2 hours and it never completes. Reboot is the only solution.

 

Could you please try downloading and installing the previous build 4.0.474? There should be no difference between v3/v4/v4.2 in terms of what the startup scanner scans. Maybe you've got some files that take longer to emulate / scan after an update of the advanced heuristics or archive module. Hence we'd like to know if downgrading to v4.0 actually makes a difference as there's no reason why it should.

If you simply go to the main setup (F5) -> Antivirus and antispyware -> Setup (in the Automatic startup file check section) and disable Advanced heuristics and Runtime packers, one at a time, does that make a difference? Of course, disabling these options is not recommended at all but at least it would narrow it down a bit.

 

Well, this problem has not re-occurred in the last week. Perhaps it was sorted by a daily update.

 

I'm having the exact same problem. But worse than that, once the startup scan ends I still have a process running (svchost.exe) which is taking up 50% of my CPUs. Has anyone found a fix for this?

 

Do you have the latest version 4.2.58 installed?

 

I have 4.0.474.0. It hasn't offered to update to a newer version. At any rate, I turned off the "automatic startup file check" on successful virus signature database update. That should stop it.

 

I have the same problem here with 4.2.58.3 on Vista 64. The start-up scan start on boot (so far so good as it is scheduled), but it keeps scanning on and on and on. I have played with the settings, changing them to "only frequently used files" etc, but nothing helps. And wit every start it keeps scanning till I switch off the computer. Very weird.
It only started recently, so I wonder if it has to do with a Windows update?

 

I found a solution which is just a preventive measure instead of a fix.

In the scheduler I set the "Automatic startup file check" to "The first time the computer starts each day". On first start of the day, it does exactly the same as before, it keeps scanning forever. So I let it scan for half an hour or so, catch-up with my e-mails and then reboot, and that stops the scanning.

Now it's a matter of waiting for a fix

 

If you notice the startup scan running forever, leave Process Monitor (by Microsoft) capturing the file operations for a couple of minutes, compress the log, upload it somewhere and PM me the link along with a brief description of the issue.

 

Sound like the startup scan in scheduler is doing either an "In Depth Scan" or a "Smart Scan".

In Tools -> Scheduler, what you want is an "Automatic startup file check" with "Launch time" of "Successful update of the virus signature database" with "Settings" of "Commonly used files".

--Always Learning

 

Made no difference for me, Always Learning. Still keeps scanning. I purposely set it to only scan at the first start-up, or else I will have this same issue every time I boot my computer during the day.

 

What are the settings for that scan? Is it "Smart scan" or " Commonly used files"?

Could you show us an image of the ESET Scheduler screen?

--AlwaysLearning

 

As per your suggestion, I set it to commonly used files, but even if I set it to "files run before logon", "files run after logon" or "most frequently used", makes no difference.

Cap of my settings:

 

Please create a ProcMon log for perusal and PM me a link to it as requested above.

 

Perhaps there is another scheduled scan.

Could you show the scheduler screen that I gave as an example?

Thanks ...

--Always Learning

 

I will do that tomorrow morning, when the next start-up scan is scheduled.

 

I started to have the same problem some days ago... the startup scan never finish so I've completely disabled it and now I've tried to run some custom scan.
The result is that if i run a scan that include operating memory it will never finish. It will never start to scan disk files because it continue to try to scan memory forever. If i start a scan that will not include memory it goes on well.

After a scan on the memory is runnng if I press stop it will not stop but remain in a state where it says "waiting to complete scan"...

It's happening on a Windows 7 64 bit machine patched with all microsoft patches and ESET Smart 4.2.58.3.

Those are module versions:
Virus signature database: 5344 (20100805)
Update module: 1031 (20091029)
Antivirus and antispyware scanner module: 1284 (20100729)
Advanced heuristics module: 1109 (20100519)
Archive support module: 1118 (20100729)
Cleaner module: 1048 (20091123)
Anti-Stealth support module: 1020 (20100713)
Personal firewall module: 1061 (20100607)
Antispam module: 1015 (20100524)
SysInspector module: 1216 (20100517)
Self-defense support module : 1017 (2010072
Real-time file system protection module: 1004 (20100727)

 

My ESET modules are not the same. I have in personal firewall version 1060 (20100507), anti stealth version 1019 (20100525), antispam version 1014 (20100212) and self defense with version 1016 (20100727). why?? (the av is updated)

 

Probably it's because I've the pre-release update configured. Do you have the same problem with the memory/startup scan or your eset is working correctly?
Tomorrow I'll try to reinstall and disable the pre-release update just to check.

 

I have windows 7 x64 and my eset is working correctly.

 

Sent you a PM with the log.

 

Sounds like a lot more people are getting this.
https://www.wilderssecurity.com/showthread.php?t=279283

No settings change except the latest sig update, but behaviour changes from v low CPU to high, but when you look in NOD file system activity nothing is actually happening (no file activity etc).

Just wondering but should the ekrn.exe be 32 bit or 64 bit with the 64 bit version? In task manager mine shows as ekrn.exe*32 even though I installed 64bit one.

Win7 64 bit
Eset NOD SS 4.2.58.3

 

I sent Marcos a log from Prcomon. He said it didn't look like there was something strange going on. While the icon continues spinning, the number of files in the Real Time File Protection statistics and the Web Access Protection, doesn't really increase accordingly.

I have a dual-boot system, and notice that since today the issue also has creeped in my Win 7 x64 system.

But I think there must be an issue somehow, as the system seems less reponsive when this issue appears, because after a reboot, it's responding faster again.

 

hi there
same problem here from this morning.
The icon is spinning all day, the CPU is almost on 100% by ekrn.exe
My english is bad, sorry about that... but I cannot fix the problem. This morning on my Seven 64 bit, I have various security update and after the necessary reboot, O noticed the the CPU was running at 100% with no program opened.
So I have checked in task manager and I've seen that the problem was by Eset.
"Eset Smart Security 4.2.85.3 Startup scan in progress is on my Eset spinning icon. I tried to reboot newly but same thing: now it's hours that it does the same thing.
What have I to do?
thanks for any help