IMON prevents download, nod32krn eats cpu

Discussion in 'NOD32 version 2 Forum' started by stephankn, Oct 29, 2006.

Thread Status:
Not open for further replies.
  1. stephankn

    stephankn Registered Member

    Joined:
    Oct 29, 2006
    Posts:
    2
    Hi,

    can someone confirm this please.

    i discovered the trying to download the following file:
    http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscan.cab

    the download will not complete. It get's stuck at 99% download.
    I observe nod32krn.exe eating my CPU and consuming RAM. I killed the process as it reached around 180M mem usage.

    Disabling imond solves the problem.
    Program run with "higher compatibility". It does not matter which program i use to download. Tried with wget and firefox.

    NOD32 antivirus system information
    Virus signature database version: 1.1842 (20061027)
    Dated: Freitag, 27. Oktober 2006
    Virus signature database build: 8313

    Information on other scanner support parts
    Advanced heuristics module version: 1.040 (20061027)
    Advanced heuristics module build: 1126
    Internet filter version: 1.002 (2004070:cool:
    Internet filter build: 1013
    Archive support module version: 1.050 (20060926)
    Archive support module build version: 1176

    Information about installed components
    NOD32 for Windows NT/2000/XP/2003/x64 - Base
    Version: 2.51.26
    NOD32 for Windows NT/2000/XP/2003/x64 - Internet support
    Version: 2.51.26
    NOD32 for Windows NT/2000/XP/2003/x64 - Standard component
    Version: 2.51.26

    Operating system information
    Platform: Windows XP
    Version: 5.1.2600 Service Pack 2
    Version of common control components: 5.82.2900
    RAM: 2048 MB
    Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz (2798 MHz)


    Stephan
     
    stephankn, Oct 29, 2006
    #1
  2. ctrlaltdelete

    ctrlaltdelete Registered Member

    Joined:
    Oct 16, 2005
    Posts:
    318
    Location:
    NL
    I tried to download the same file.

    99.gif
     
    ctrlaltdelete, Oct 29, 2006
    #2
  3. ctrlaltdelete

    ctrlaltdelete Registered Member

    Joined:
    Oct 16, 2005
    Posts:
    318
    Location:
    NL
    DMON was scanning the file

    99a.gif
     
    ctrlaltdelete, Oct 29, 2006
    #3
  4. ctrlaltdelete

    ctrlaltdelete Registered Member

    Joined:
    Oct 16, 2005
    Posts:
    318
    Location:
    NL
    After scanning more then 58000 files inside the *.cab

    99c.gif
     
    ctrlaltdelete, Oct 29, 2006
    #4
  5. ctrlaltdelete

    ctrlaltdelete Registered Member

    Joined:
    Oct 16, 2005
    Posts:
    318
    Location:
    NL
    I'm not sure if IMON also scanned the file after DMON did, but i had to wait a few minutes before the download was complete.
    Didnt check the time exactly, maybe 2 or 3 minutes before it was complete.
     
    ctrlaltdelete, Oct 29, 2006
    #5
  6. stephankn

    stephankn Registered Member

    Joined:
    Oct 29, 2006
    Posts:
    2
    Hi,

    small addition: the option "scan archives" causes the problem. It looks like the scan takes very long. a on-demand scan took nearly two minutes.
    So letting it run longer it was able to finish. Also reducing effective data rate from 680kB/s down to 48kB/s.

    For me the solution is to disable scanning of archives in imon. Malware inside should get detected by amon anyway.

    Stephan
     
    stephankn, Oct 29, 2006
    #6
  7. alglove

    alglove Registered Member

    Joined:
    Jan 17, 2005
    Posts:
    904
    Location:
    Houston, Texas, USA
    alglove, Oct 30, 2006
    #7
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...