startup scan in progress

Discussion in 'ESET Smart Security' started by jdelgado, May 6, 2010.

Thread Status:
Not open for further replies.
  1. jdelgado

    jdelgado Registered Member

    Joined:
    May 19, 2008
    Posts:
    9
    Hi,

    I have been having an issue which it looks like my startup scan is happening at different times during the day. I have been starting my computer at 7:30 AM and the startup scan is happening at different times like it just happen a moment ago and I cannot do anything in may computer CPU usage goes to 100 % and I need to wait for it to finished before I can do anything and it looks like it happening back to back I check on the schedule and it shows two entries I guess it is supposed to scan too after an update. But this was not happening to me with the previous version 4.0.474 it just started to happen when I upgraded to 4.2.40.

    Any ideas ?

    Thanks
    jdelgado
     
  2. regnim

    regnim Registered Member

    Joined:
    Sep 2, 2005
    Posts:
    13
    Same here, started with 4.2.40. Startup scan happens randomly and takes 100% of one core and no way to stop it. I let go for 2 hours and it never completes. Reboot is the only solution.
     
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Could you please try downloading and installing the previous build 4.0.474? There should be no difference between v3/v4/v4.2 in terms of what the startup scanner scans. Maybe you've got some files that take longer to emulate / scan after an update of the advanced heuristics or archive module. Hence we'd like to know if downgrading to v4.0 actually makes a difference as there's no reason why it should.

    If you simply go to the main setup (F5) -> Antivirus and antispyware -> Setup (in the Automatic startup file check section) and disable Advanced heuristics and Runtime packers, one at a time, does that make a difference? Of course, disabling these options is not recommended at all but at least it would narrow it down a bit.
     
  4. regnim

    regnim Registered Member

    Joined:
    Sep 2, 2005
    Posts:
    13
    Well, this problem has not re-occurred in the last week. Perhaps it was sorted by a daily update.
     
  5. Zookeeper1964

    Zookeeper1964 Registered Member

    Joined:
    Jul 27, 2010
    Posts:
    3
    I'm having the exact same problem. But worse than that, once the startup scan ends I still have a process running (svchost.exe) which is taking up 50% of my CPUs. Has anyone found a fix for this?
     
  6. nonoise

    nonoise Registered Member

    Joined:
    Jun 6, 2008
    Posts:
    322
    Do you have the latest version 4.2.58 installed?
     
  7. Zookeeper1964

    Zookeeper1964 Registered Member

    Joined:
    Jul 27, 2010
    Posts:
    3
    I have 4.0.474.0. It hasn't offered to update to a newer version. At any rate, I turned off the "automatic startup file check" on successful virus signature database update. That should stop it.
     
  8. taeke

    taeke Registered Member

    Joined:
    Sep 26, 2009
    Posts:
    11
    I have the same problem here with 4.2.58.3 on Vista 64. The start-up scan start on boot (so far so good as it is scheduled), but it keeps scanning on and on and on. I have played with the settings, changing them to "only frequently used files" etc, but nothing helps. And wit every start it keeps scanning till I switch off the computer. Very weird.
    It only started recently, so I wonder if it has to do with a Windows update?
     
  9. taeke

    taeke Registered Member

    Joined:
    Sep 26, 2009
    Posts:
    11
    I found a solution which is just a preventive measure instead of a fix.

    In the scheduler I set the "Automatic startup file check" to "The first time the computer starts each day". On first start of the day, it does exactly the same as before, it keeps scanning forever. So I let it scan for half an hour or so, catch-up with my e-mails and then reboot, and that stops the scanning.

    Now it's a matter of waiting for a fix :D
     
  10. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    If you notice the startup scan running forever, leave Process Monitor (by Microsoft) capturing the file operations for a couple of minutes, compress the log, upload it somewhere and PM me the link along with a brief description of the issue.
     
  11. AlwaysLearning

    AlwaysLearning Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    22
    Sound like the startup scan in scheduler is doing either an "In Depth Scan" or a "Smart Scan".

    In Tools -> Scheduler, what you want is an "Automatic startup file check" with "Launch time" of "Successful update of the virus signature database" with "Settings" of "Commonly used files".

    --Always Learning
     

    Attached Files:

  12. taeke

    taeke Registered Member

    Joined:
    Sep 26, 2009
    Posts:
    11
    Made no difference for me, Always Learning. Still keeps scanning. I purposely set it to only scan at the first start-up, or else I will have this same issue every time I boot my computer during the day.
     
  13. AlwaysLearning

    AlwaysLearning Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    22
    What are the settings for that scan? Is it "Smart scan" or " Commonly used files"?

    Could you show us an image of the ESET Scheduler screen?

    --AlwaysLearning
     
  14. taeke

    taeke Registered Member

    Joined:
    Sep 26, 2009
    Posts:
    11
    As per your suggestion, I set it to commonly used files, but even if I set it to "files run before logon", "files run after logon" or "most frequently used", makes no difference.

    Cap of my settings:
     

    Attached Files:

  15. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Please create a ProcMon log for perusal and PM me a link to it as requested above.
     
  16. AlwaysLearning

    AlwaysLearning Registered Member

    Joined:
    Aug 1, 2010
    Posts:
    22
    Perhaps there is another scheduled scan.

    Could you show the scheduler screen that I gave as an example?

    Thanks ...

    --Always Learning
     
  17. taeke

    taeke Registered Member

    Joined:
    Sep 26, 2009
    Posts:
    11
    I will do that tomorrow morning, when the next start-up scan is scheduled.
     
  18. fduranti

    fduranti Registered Member

    Joined:
    Oct 15, 2006
    Posts:
    11
    I started to have the same problem some days ago... the startup scan never finish so I've completely disabled it and now I've tried to run some custom scan.
    The result is that if i run a scan that include operating memory it will never finish. It will never start to scan disk files because it continue to try to scan memory forever. If i start a scan that will not include memory it goes on well.

    After a scan on the memory is runnng if I press stop it will not stop but remain in a state where it says "waiting to complete scan"...

    It's happening on a Windows 7 64 bit machine patched with all microsoft patches and ESET Smart 4.2.58.3.

    Those are module versions:
    Virus signature database: 5344 (20100805)
    Update module: 1031 (20091029)
    Antivirus and antispyware scanner module: 1284 (20100729)
    Advanced heuristics module: 1109 (20100519)
    Archive support module: 1118 (20100729)
    Cleaner module: 1048 (20091123)
    Anti-Stealth support module: 1020 (20100713)
    Personal firewall module: 1061 (20100607)
    Antispam module: 1015 (20100524)
    SysInspector module: 1216 (20100517)
    Self-defense support module : 1017 (2010072:cool:
    Real-time file system protection module: 1004 (20100727)
     
  19. picomanico

    picomanico Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    19
    My ESET modules are not the same. I have in personal firewall version 1060 (20100507), anti stealth version 1019 (20100525), antispam version 1014 (20100212) and self defense with version 1016 (20100727). why?? (the av is updated)
     
    Last edited: Aug 5, 2010
  20. fduranti

    fduranti Registered Member

    Joined:
    Oct 15, 2006
    Posts:
    11
    Probably it's because I've the pre-release update configured. Do you have the same problem with the memory/startup scan or your eset is working correctly?
    Tomorrow I'll try to reinstall and disable the pre-release update just to check.
     
  21. picomanico

    picomanico Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    19
    I have windows 7 x64 and my eset is working correctly.
     
  22. taeke

    taeke Registered Member

    Joined:
    Sep 26, 2009
    Posts:
    11
    Sent you a PM with the log.
     
  23. Slice

    Slice Registered Member

    Joined:
    Dec 22, 2009
    Posts:
    3
    Sounds like a lot more people are getting this.
    https://www.wilderssecurity.com/showthread.php?t=279283

    No settings change except the latest sig update, but behaviour changes from v low CPU to high, but when you look in NOD file system activity nothing is actually happening (no file activity etc).

    Just wondering but should the ekrn.exe be 32 bit or 64 bit with the 64 bit version? In task manager mine shows as ekrn.exe*32 even though I installed 64bit one.

    Win7 64 bit
    Eset NOD SS 4.2.58.3
     
    Last edited: Aug 11, 2010
  24. taeke

    taeke Registered Member

    Joined:
    Sep 26, 2009
    Posts:
    11
    I sent Marcos a log from Prcomon. He said it didn't look like there was something strange going on. While the icon continues spinning, the number of files in the Real Time File Protection statistics and the Web Access Protection, doesn't really increase accordingly.

    I have a dual-boot system, and notice that since today the issue also has creeped in my Win 7 x64 system.

    But I think there must be an issue somehow, as the system seems less reponsive when this issue appears, because after a reboot, it's responding faster again.
     
  25. Lio

    Lio Registered Member

    Joined:
    Jun 3, 2008
    Posts:
    13
    hi there
    same problem here from this morning.
    The icon is spinning all day, the CPU is almost on 100% by ekrn.exe :(
    My english is bad, sorry about that... but I cannot fix the problem. This morning on my Seven 64 bit, I have various security update and after the necessary reboot, O noticed the the CPU was running at 100% with no program opened.
    So I have checked in task manager and I've seen that the problem was by Eset.
    "Eset Smart Security 4.2.85.3 Startup scan in progress is on my Eset spinning icon. I tried to reboot newly but same thing: now it's hours that it does the same thing.
    What have I to do?
    thanks for any help
     
Thread Status:
Not open for further replies.