IMON prevents download, nod32krn eats cpu

Discussion in 'NOD32 version 2 Forum' started by stephankn, Oct 29, 2006.

Thread Status:
Not open for further replies.
  1. stephankn

    stephankn Registered Member

    Joined:
    Oct 29, 2006
    Posts:
    2
    Hi,

    can someone confirm this please.

    i discovered the trying to download the following file:
    http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscan.cab

    the download will not complete. It get's stuck at 99% download.
    I observe nod32krn.exe eating my CPU and consuming RAM. I killed the process as it reached around 180M mem usage.

    Disabling imond solves the problem.
    Program run with "higher compatibility". It does not matter which program i use to download. Tried with wget and firefox.

    NOD32 antivirus system information
    Virus signature database version: 1.1842 (20061027)
    Dated: Freitag, 27. Oktober 2006
    Virus signature database build: 8313

    Information on other scanner support parts
    Advanced heuristics module version: 1.040 (20061027)
    Advanced heuristics module build: 1126
    Internet filter version: 1.002 (2004070:cool:
    Internet filter build: 1013
    Archive support module version: 1.050 (20060926)
    Archive support module build version: 1176

    Information about installed components
    NOD32 for Windows NT/2000/XP/2003/x64 - Base
    Version: 2.51.26
    NOD32 for Windows NT/2000/XP/2003/x64 - Internet support
    Version: 2.51.26
    NOD32 for Windows NT/2000/XP/2003/x64 - Standard component
    Version: 2.51.26

    Operating system information
    Platform: Windows XP
    Version: 5.1.2600 Service Pack 2
    Version of common control components: 5.82.2900
    RAM: 2048 MB
    Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz (2798 MHz)


    Stephan
     
  2. ctrlaltdelete

    ctrlaltdelete Registered Member

    Joined:
    Oct 16, 2005
    Posts:
    318
    Location:
    NL
    I tried to download the same file.

    99.gif
     
  3. ctrlaltdelete

    ctrlaltdelete Registered Member

    Joined:
    Oct 16, 2005
    Posts:
    318
    Location:
    NL
    DMON was scanning the file

    99a.gif
     
  4. ctrlaltdelete

    ctrlaltdelete Registered Member

    Joined:
    Oct 16, 2005
    Posts:
    318
    Location:
    NL
    After scanning more then 58000 files inside the *.cab

    99c.gif
     
  5. ctrlaltdelete

    ctrlaltdelete Registered Member

    Joined:
    Oct 16, 2005
    Posts:
    318
    Location:
    NL
    I'm not sure if IMON also scanned the file after DMON did, but i had to wait a few minutes before the download was complete.
    Didnt check the time exactly, maybe 2 or 3 minutes before it was complete.
     
  6. stephankn

    stephankn Registered Member

    Joined:
    Oct 29, 2006
    Posts:
    2
    Hi,

    small addition: the option "scan archives" causes the problem. It looks like the scan takes very long. a on-demand scan took nearly two minutes.
    So letting it run longer it was able to finish. Also reducing effective data rate from 680kB/s down to 48kB/s.

    For me the solution is to disable scanning of archives in imon. Malware inside should get detected by amon anyway.

    Stephan
     
  7. alglove

    alglove Registered Member

    Joined:
    Jan 17, 2005
    Posts:
    904
    Location:
    Houston, Texas, USA
Thread Status:
Not open for further replies.