I just finished reinstalling ESET after rolling back to a restore point
prior to the problems. I installed with no network connection (cable
disconnected), which means I had the virus defs from some time in 2008,
IIRC. The system was predictably unaffected by recent problems.
I connected the connected the network cable, updated my defs (taking down
version info), and rebooted. I was expecting to see immediate system hangs;
instead, it took 5-10 minutes.
I put instructions for disabling the service on my blog:
http://www.uvm.edu/~gcd/?p=221 which includes a few screen clips of the
My current version info:
Virus signature database: 4294 (20090731)
Update module: 1028 (20090302)
Antivirus and antispyware scanner module: 1229 (20090724)
Advanced heuristics module: 1095 (20090727)
Archive support module: 1099 (20090730)
Cleaner module: 1043 (20090728)
Anti-Stealth support module: 1012 (20090526)
(captured after updating and before rebooting)
From: Technology Discussion at UVM [mailto:[log in to unmask]] On
Behalf Of Jonathan L. Trigaux
Sent: Friday, July 31, 2009 2:54 PM
To: [log in to unmask]
Subject: State of the ESET address
I spoke with ESET support on the phone and described what our problems
have been and what we've been able to determine given the various tests
around campus. The support rep's diagnosis was similar to this one:
ekrn locks computer (100% cpu) on flash uninstaller
in that the "Archive support module v1099" released yesterday is causing
this problem. Their current solution is to disable (or uninstall) ESET
until they can release a patch.
Thanks to the information people have sent to me with their module
version, however, I was able to inform the support rep that some computers
exhibiting the lock-up behavior were running v1092 and v1097 of the
Archive support module, and some running v1099 have had no trouble at all.
The support rep seemed surprised by this and said he would have to
escalate our ticket to Tier 3 support.
As it stands now, we're waiting a) to hear back from Tier 3 support, and
b) for ESET to release an update that fixes whatever their last update
broke. The current recommended solution is still to either disable the
ESET service or uninstall the program until a patch can be applied.
I don't have much more info than that, but let me know if anyone has any
Also, thanks again to everyone who sent me their ESET module info.
Jonathan L. Trigaux
Enterprise Technology Services: Client Services
Rubenstein School of Environment & Natural Resources: IT Services
113N Waterman | 207 Aiken
University of Vermont
Burlington, VT 05405