How long does a startup scan take?

Discussion in 'ESET NOD32 Antivirus' started by grun93, Aug 11, 2010.

Thread Status:
Not open for further replies.
  1. pbcopter

    pbcopter Registered Member

    Joined:
    Jun 23, 2009
    Posts:
    5
    The latest update appears to have corrected the problem on my system as well.
     
  2. Gary Hunter

    Gary Hunter Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    3
    Well I have updated my definitions and then run a scan and once again NOD32 is hanging on scanning operating memory so the problem is n't sorted!
     
  3. Tumi

    Tumi Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    6
    I'm in the process of uploading the dump (640MB) made on Win7 x64. When it's finished (slow upload), I'm gonna pm you the link if someone else doesn't beat me to it or something.

    The weird thing is that now I can't reproduce the problem anymore after the 5359 definitions and 1021 Anti-Stealth module updates. I turned on pre-release updates and there was a message that program modules have been updated. It still shows Anti-Stealth v1021 though. I restarted the system several times, Anti-Stealth is turned on but memory test passes every time. I'm gonna try some more to reproduce the problem but in the meanwhile the dump when it wasn't working is on it's way.
     
  4. goodie2shoes

    goodie2shoes Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    3
    Location:
    The Netherlands
    The problem seems to be solved with the latest updates.
     
    Last edited: Aug 11, 2010
  5. Rmuffler

    Rmuffler Former Eset Moderator

    Joined:
    Jun 26, 2008
    Posts:
    1,000
    Location:
    Bismarck, ND USA
  6. Gary Hunter

    Gary Hunter Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    3
    Updated my definitions to the one's stated above and NOD32 still hangs on scanning Operating memory, the only way I can get NOD32 to work properly is by unchecking "Enable Anti Stealth technology"

    This is driving me nuts!!
     
  7. Gary Hunter

    Gary Hunter Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    3
    It's been stuck on scanning operating memory for over half an hour and I can't stop the scan!
     
  8. cool1007

    cool1007 Registered Member

    Joined:
    Oct 19, 2009
    Posts:
    57
    As an additional note... updating the virus definition to 5359 alone doesn't do the trick... I had to reboot the computer and now I have ESET back to normal behavior. I didn't disable any option or tried any other alternative mentioned in this thread.

    Thanks,
     
  9. haerdalis

    haerdalis Registered Member

    Joined:
    Sep 6, 2006
    Posts:
    74
    It seems like I can confirm the issue disappeared.
     
  10. grun93

    grun93 Registered Member

    Joined:
    May 11, 2009
    Posts:
    24
    May I ask how exactly did you made that dump and how long does it take before the dump is written to the HDD? Also important: where can I find it and what is the name? :D Yesterday I tried to create a dump by first changing the registry and pressing the right CTRL key together with Scroll Lock (twice) but nothing seemed to happen. Maybe I didn't wait long enough.

    This morning I turned on the pc and saw that that little green ESET icon in the taskbar didn't stop turning. I tried to enter the advanced settings to turn stealth mode off, but after typing the master password, I was stuck and not able to proceed. The mouse cursor disappeared behind the screen, rather than to always stay on top. At the same time the Internet connection seemed to be lost, Outlook and Firefox stopped responding. However, after a reboot everything is just fine, everything works as it should, including NOD32.
     
  11. Tumi

    Tumi Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    6
    Well, just followed instructions Marcos gave here but I did have a few problems. First I was sure I had PS2 keyboard so I edited the wrong registry entry the first time. :) Second mistake was I didn't read instructions carefully cause it said right CTRL, not just any CTRL but the RIGHT CTRL and then ScrLk twice. :)

    By default MEMORY.DMP is set to dump into %SYSTEMROOT%\MEMORY.DMP which for the majority is C:\WINDOWS\MEMORY.DMP. I tried this twice and there was no MEMORY.DMP file to be found anywhere on C: so I changed the dump location to D:\MEMORY.DMP and it worked.
    How long does it take? Well it happens instantly, for a half a second screen goes somewhat garbled and then the BSOD pops up writing the dump to the HDD as fast as your HDD can write the file as big as your RAM is.

    Hope I might have helped someone dumping the dump. :)
     
  12. grun93

    grun93 Registered Member

    Joined:
    May 11, 2009
    Posts:
    24
    Thanks. I know what you mean, I was confused too because my keyboard is actually a PS/2 type, but connected to a USB port through one of those tiny adapters. What I probably overlooked was that I forgot to restart the pc after changing the registry.
     
  13. Tumi

    Tumi Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    6
    So today I uninstalled NOD32 and installed it again, updated it, checked pre-release updates option and updated it again and now I have Anti-Stealth module ver 1020 and after restart scanning memory once again reproduces the problem so I can generate the dump again if it's needed or something.

    For people having troubles with complete memory dump I found this page to be useful as I had problems dumping it to C:\ drive which has less than 25GB free so the dump was not saved and I have 8GB of RAM so that's another issue why you might not have "Complete memory dump" option available. Registry workaround from this link didn't work for me (it would revert back) so I used msconfig->Boot->Advanced options->Maximum memory limit to 2048 just to be able to produce a Complete memory dump.
     
  14. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    We will be very grateful for the dumps. Much appreciated.
     
  15. Tumi

    Tumi Registered Member

    Joined:
    Aug 11, 2010
    Posts:
    6
    I already sent you a pm with the link to my first dump. Let me know if you got it or not so I can send it again. I'm gonna start uploading the second dump I created today so I'll send that link as well when it's done.
     
  16. jimbobaloo

    jimbobaloo Registered Member

    Joined:
    Jan 18, 2004
    Posts:
    11
    Location:
    Michigan, USA
    Same here. Have to reboot. That's all it took to return to normal.
     
  17. cdr478s

    cdr478s Registered Member

    Joined:
    Sep 22, 2005
    Posts:
    17
    We have several machines with the same slow-down problem on boot. They are all WinXP Pro 32 bit. I updated the version to 4.2.58.3 thinking that would help but its still running very slowly for a good 10 to 15 minutes after login. I did notice that it does not seem to do this if the first person logged in is logged in as Administrator.
    Should I uninstall and reinstall the program?
    Check to make sure Anti-Stealth v1021 is installed?
    Turn off startup scan on user logon or both startup scans?

    Thanks.
     
  18. cool1007

    cool1007 Registered Member

    Joined:
    Oct 19, 2009
    Posts:
    57
    Try installing latest version 4.2.64 and update to latest definition (5397 at the time of this post).
     
  19. cdr478s

    cdr478s Registered Member

    Joined:
    Sep 22, 2005
    Posts:
    17
    should I be able to install directly over, or should I remove, then re-install? Also, we have a few different settings which I didn't know if that would contribute. I turn off scanning of networked drives and change it so it doesn't throw in a sig line on e-mails.
     
  20. cool1007

    cool1007 Registered Member

    Joined:
    Oct 19, 2009
    Posts:
    57
    I installed over. It should work the same way for you... Remember to reboot after you upgrade.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.