ekrn.exe scrive costantemente sul mio HDD

3

Ho installato Windows 7 circa cinque giorni fa e mi sono reso conto che il sistema utilizza costantemente il mio HDD.

Ho disattivato l'indicizzazione dei file e tutti gli altri servizi, senza alcun effetto.

Ora ho scaricato SysInternals Process Monitor e questa sezione è stata riproposta più di dieci volte al secondo:

15:24:06,5987317    ekrn.exe    1492    RegQueryKey HKLM    SUCCESS Query: HandleTags, HandleTags: 0x0
15:24:06,5987627    ekrn.exe    1492    RegOpenKey  HKLM\Software\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles   SUCCESS Desired Access: Read
15:24:06,5987969    ekrn.exe    1492    RegSetInfoKey   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles   SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0
15:24:06,5988231    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\Enable    NAME NOT FOUND  Length: 144
15:24:06,5988549    ekrn.exe    1492    RegQueryKey HKLM    SUCCESS Query: HandleTags, HandleTags: 0x0
15:24:06,5988778    ekrn.exe    1492    RegOpenKey  HKLM\Software\ESET\ESET Security\CurrentVersion\Plugins\01000101\Default    NAME NOT FOUND  Desired Access: Read
15:24:06,5989098    ekrn.exe    1492    RegQueryKey HKLM    SUCCESS Query: HandleTags, HandleTags: 0x0
15:24:06,5989317    ekrn.exe    1492    RegOpenKey  HKLM\Software\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile   SUCCESS Desired Access: Read
15:24:06,5989573    ekrn.exe    1492    RegSetInfoKey   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile   SUCCESS KeySetInformationClass: KeySetHandleTagsInformation, Length: 0
15:24:06,5989768    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\DiskFloppy    NAME NOT FOUND  Length: 144
15:24:06,5989979    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\DiskLocal NAME NOT FOUND  Length: 144
15:24:06,5990170    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\DiskNetwork   NAME NOT FOUND  Length: 144
15:24:06,5990362    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanOpen  NAME NOT FOUND  Length: 144
15:24:06,5990549    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanExecute   NAME NOT FOUND  Length: 144
15:24:06,5990737    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanCreate    NAME NOT FOUND  Length: 144
15:24:06,5990932    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanNetworkOnClose    NAME NOT FOUND  Length: 144
15:24:06,5991119    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanOnAccess  NAME NOT FOUND  Length: 144
15:24:06,5991311    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanShutdown  NAME NOT FOUND  Length: 144
15:24:06,5991498    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\OptimizeScan  NAME NOT FOUND  Length: 144
15:24:06,5991686    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\Autostart SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5991874    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\Autostart SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5992075    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\OnOpen_RuntimeArchives    NAME NOT FOUND  Length: 144
15:24:06,5992270    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\OnOpen_AutoExecArchives   NAME NOT FOUND  Length: 144
15:24:06,5992461    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\OnOpen_AdvanceHeuristic   NAME NOT FOUND  Length: 144
15:24:06,5992649    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanExecuteAH SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5992836    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ScanExecuteAH SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5993034    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\DiskFloppyOnExecuteAH NAME NOT FOUND  Length: 144
15:24:06,5993222    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\BlockRemovableDevices NAME NOT FOUND  Length: 144
15:24:06,5993413    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\DefaultArchSettings   NAME NOT FOUND  Length: 144
15:24:06,5993605    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ArchiveDepth  NAME NOT FOUND  Length: 144
15:24:06,5993796    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\ArchiveMaxFilesize    NAME NOT FOUND  Length: 144
15:24:06,5993994    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\AllowedDevices    NAME NOT FOUND  Length: 144
15:24:06,5994202    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\USBDevicesLikeDisk    NAME NOT FOUND  Length: 144
15:24:06,5994403    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\AdvancedBlockRemovableDevices NAME NOT FOUND  Length: 144
15:24:06,5994598    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\AskForScanOfRemovableDevice   NAME NOT FOUND  Length: 144
15:24:06,5994793    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\AskForScanOfRemovableDeviceDefaultAction  SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5994984    ekrn.exe    1492    RegQueryValue   HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile\AskForScanOfRemovableDeviceDefaultAction  SUCCESS Type: REG_DWORD, Length: 4, Data: 1
15:24:06,5995212    ekrn.exe    1492    RegCloseKey HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles\@My profile   SUCCESS 
15:24:06,5995421    ekrn.exe    1492    RegCloseKey HKLM\SOFTWARE\ESET\ESET Security\CurrentVersion\Plugins\01000101\Profiles   SUCCESS 
15:24:06,6789163    GSvr.exe    1576    CreateFile  C:\service.log  SUCCESS Desired Access: Generic Read/Write, Disposition: OpenIf, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: N, ShareMode: Read, Write, AllocationSize: 0, OpenResult: Opened
15:24:06,6790420    GSvr.exe    1576    CreateFile  C:\service.log  SUCCESS Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Complete If Oplocked, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
15:24:06,6790997    GSvr.exe    1576    QueryFileInternalInformationFile    C:\service.log  SUCCESS IndexNumber: 0x2000000000095
15:24:06,6791369    GSvr.exe    1576    QueryBasicInformationFile   C:\service.log  SUCCESS CreationTime: 2011.11.09. 0:04:45, LastAccessTime: 2011.11.18. 14:45:17, LastWriteTime: 2011.11.18. 15:24:06, ChangeTime: 2011.11.18. 15:24:06, FileAttributes: A
15:24:06,6795206    GSvr.exe    1576    QueryStandardInformationFile    C:\service.log  SUCCESS AllocationSize: 20 480, EndOfFile: 19 547, NumberOfLinks: 1, DeletePending: False, Directory: False
15:24:06,6795424    GSvr.exe    1576    CloseFile   C:\service.log  SUCCESS 
15:24:06,6796588    GSvr.exe    1576    QueryStandardInformationFile    C:\service.log  SUCCESS AllocationSize: 20 480, EndOfFile: 19 547, NumberOfLinks: 1, DeletePending: False, Directory: False
15:24:06,6796824    GSvr.exe    1576    ReadFile    C:\service.log  SUCCESS Offset: 19 546, Length: 1, Priority: Normal
15:24:06,6797162    GSvr.exe    1576    QueryStandardInformationFile    C:\service.log  SUCCESS AllocationSize: 20 480, EndOfFile: 19 547, NumberOfLinks: 1, DeletePending: False, Directory: False
15:24:06,6797353    GSvr.exe    1576    QueryStandardInformationFile    C:\service.log  SUCCESS AllocationSize: 20 480, EndOfFile: 19 547, NumberOfLinks: 1, DeletePending: False, Directory: False
15:24:06,6797732    GSvr.exe    1576    WriteFile   C:\service.log  SUCCESS Offset: 19 547, Length: 1, Priority: Normal
15:24:06,6798292    GSvr.exe    1576    CloseFile   C:\service.log  SUCCESS

Quindi ekrn.exe(ESET Smart Security) non è così intelligente, sta cercando di fare qualcosa nel registro, ma non può, registra il problema nel service.log e riprova costantemente ...

hai qualche idea su come aggiustarlo?

windows-7  hard-drive  windows-registry  anti-virus  nod32 
— inf3rno
fonte
Quale edizione / versione di ESS?
— Ƭᴇcʜιᴇ007,
ESET Smart Security 5.0.94.0 Windows 7 Ultimate 64 bit 6.1.7601 SP1
— inf3rno

Risposte:

0

Sembra che ESet abbia problemi di compatibilità con Windows 7. Forse stai usando una versione precedente che non è compatibile con Windows 7 oppure qualcosa non va bene con l'installazione. Prima di tutto vorrei assicurarmi di utilizzare l'ultima versione di ESet. In tal caso, provare a disinstallare e reinstallare ESet.

— BBlake
fonte
Hmm, questa è l'ultima versione della sicurezza intelligente, l'ho installata qualche giorno fa ... Okey, la reinstallo ... Ho inviato un messaggio a ESET, forse possono rispondere al problema: S
— inf3rno,
Il GSvr.exe era il problema con la scrittura costante. Ho disinstallato il gigabyte di risparmio energetico e ora è un po 'meglio. Penso che l'antivirus abbia davvero problemi di compatibilità, ho parlato con il supporto di sycontact, lo controlleranno la prossima settimana ...
— inf3rno
1
Stavo per dire che GSrv NON fa parte del software ESET. Uso NOD32 con MOLTE macchine Windows 7 (abbiamo ~ 325 licenze NOD32), è completamente compatibile, potresti voler passare il tempo a modificare le impostazioni. :)
— Ƭᴇcʜιᴇ007,
Sì, gsrv non è la parte di nod32. Il problema di scrittura su hdd è stato risolto disinstallando gsrv ... Sembra che l'antivir abbia problemi di compatibilità (come diceva BBlake), altrimenti non invierebbe richieste al registro ~ 1000 volte / min.
— inf3rno,
Utilizzando il nostro sito, riconosci di aver letto e compreso le nostre Informativa sui cookie e Informativa sulla privacy.
Licensed under cc by-sa 3.0 with attribution required.