East Smart Security Problems

1- i found some files related to eset in "windows\temp" takes a lot of space and grow up to more than 2GB and i can't delete them i must restart the system to delete them

http://img411.imageshack.us/img411/5452/53247910.jpg

this picture after i start my system just for 1 hour i can take another picture at the end of the day to see how much space it takes

2- memory leak problem didn't fixed until now in v6 and no answer if it will be fixed or not!

 

i forgot do say about firewall problem that didn't fixed too, here

https://www.wilderssecurity.com/showthread.php?t=324456

 

1, most likely you're still downloading a large file or streaming a video, hence you cannot delete the temporary files. They should be deleted automatically after the connection has closed. Try closing your browser (check the task manager to make sure it's closed), then the files should be gone or at least you should be able delete them. If you use Windows 7, also make sure to install all hotfixes provided by Microsoft, especially those addressing WFP issues.

2, I'm not aware of any memory leaks in v6 RTM. I'd strongly suggest generating a complete memory dump of ekrn.exe when it consumes too much RAM (i.e. > 150-200 MB) and supplying it to Customer care for analysis.

3, the error has been fixed in the mean time.

 

1- i tried to close firefox and files still there, i think it must deleted automatically

2- i created dump file for ekrn.exe and it's 238MB, do you want me to upload it to any site and send link to you?

and memory leak problem same as v5 that it will be fixed next version

3- what do you mean by mean time? are this problem will be fixed in next version?

 

after i close firefox and tried to delete files manually, i deleted them but they appears again with same size!!

 

That means an HTTP-enabled application (browser, media player, download manager, etc.) is still downloading them. I'd suggest running "netstat -ab" to find out which application is downloading data via http.

 

Yes please, but compress the dump before you upload it.

Yes, it will be fixed in the next build.

 

dump file:

http://www.mirrorcreator.com/files/MWOQKTRH/ekrn_120827_162437.zip_links

 

Please see this post number 41

https://www.wilderssecurity.com/showthread.php?t=327119&page=2

 

any new updates??

 

i installed last windows updates for first problem but didn't fixed it

http://img18.imageshack.us/img18/8246/52270079.jpg

 

For uploading ekrn dumps, you can use this free file hosting service.

I assume you're running Windows 7 SP1; otherwise you'd need to install this WFP hotfix rollup. Regardless of your Windows 7 version, please also install this WFP hotfix.

 

1- this site required credit card, can you try to download from one of these free sites?

http://www.ziddu.com/download/20209214/ekrn_120827_162437.zip.html

http://jumbofiles.com/74r03nfm1row

http://depositfiles.com/files/4kosbloxa

http://minus.com/lLlclB1RJDnCk

https://rapidshare.com/#!download|378p4|4167677490|ekrn_120827_162437.zip|133556|0|0

http://www.2shared.com/file/FUvSZCzm/ekrn_120827_162437.html

2- i will try these fixes and tell you what happens

 

this hotfix don't want to install

http://support.microsoft.com/kb/981889

http://img443.imageshack.us/img443/8593/sshot1sz.jpg

other thing that these files problem i tried it in another computer with win7 64Bit and same problem

 

You tried downloading the update manually and installing it (not using windows update).

Think thats the same file i had problems doing via windows update and downloading the file and running it worked first time.

Using win 7 x64

 

after the fix same problem, files still appears and i must restart my computer to delete them

 

Hello BALTAGY,

Are you using a webstreamer, recording tool of online radio stations or videos?
These tools when they are active can also generate those htt***.tmp files.

What add-ons are currently installed in Firefox?

Are you using software to view websites offline (when not connected to the internet?

What you can do to verify what software or process is creating these tmp files, you can use ProcessMonitor.



Regards
Niels

 

Perhaps you could upload those files somewhere and I'll check their content. That might give a clue about what application is reponsible for generating them.

 

Niels:

1- i don't use these programs or software to view websites offline
2- the only radio program that i use "AIMP" and i didn't use it for a long time
3- when i use NOD v5 or v4 these problems didn't happen with the same way i use computer and same programs
4- when i treid to unlock these files with unlocker program it say's that ekrn use it

Marcos:

i can't copy or compress them it say's i don't have permission exept one file "NOD1676.tmp"

last screenshot:
http://img255.imageshack.us/img255/8097/sshot1d.jpg

NOD1676.tmp:

https://www.rapidshare.com/files/676886229/NOD1676.zip
http://minus.com/lHh63JCuNPqj2
http://depositfiles.com/files/5wgp7v1vm
http://jumbofiles.com/6aub9ulo658b
http://www34.zippyshare.com/v/9006588/file.html
http://rghost.net/40161205

Note:
1- i installed Eset smart security v5 before and all these problems gone
2- memory leak problem same as v5 and i know that v5 memory leak will be fixed in next version

 

Last Screenshot:
http://img850.imageshack.us/img850/7311/sshot1oy.jpg

the bigger file 1GB i copied it normally and compressed it

new size after compress 58MB!!

https://www.rapidshare.com/files/1251748963/htt7279.zip
http://minus.com/l6fLov2UO4TVN
http://depositfiles.com/files/aa4q6bl69
http://www54.zippyshare.com/v/20107798/file.html
http://jumbofiles.com/x18swnrpsxdc

 

The temp file seems to contain Sleeping.Dogs-Limited.Edition-Black.Box.iso. Does it sound familiar to you?

 

yes, that's the game i download it now

 

That explains it all then.

 

but if this problem from internet download manager or windows why didn't happened with nod v4 and v5 only when v6 installed??!!

and what about memory leak problem?

 

That is a good question, i have too contacted support ,submitted full memory dumps,ect, after pointing at other software as being the cause, (which having tested with it both not running or un-installed) made little or no difference, the facts are that almost any activity will cause ekrn.exe to increase the amount of private memory, that in it's self isnt really the problem, the problem seems to be that ekrn.exe then fails to completely unload this memory that it used whilst you carried out that activity be it browsing the web watching streaming tv/films checking e-mail (outlook ect) or some other activity , so it starts to accumulate and doesn't seem to stop doing that ,And from what i was told by support, they are saying they cannot find anything obvious , so it doesn't really give me a lot of faith in this problem being fixed anytime soon,bit of a cop out IMO