Is ESET stealing my cap!?

S

sitnet

Senior Member
Joined
Apr 4, 2008
Messages
886
Reaction score
34
The past couple of weeks I have been realizing that I am using a lot more cap than usual. I couldn't understand it because I was browsing exactly the same amount of time!

So then I remembered that I installed ESET Smart Secutrity 4 (not considering it as a culprit yet), so I went to the connections tab on the ESET UI and saw that ekrn.exe was the culprit. After some reasearch I found out that this is the ESET firewall! Most of the time it was downloading more that I was:mad:

How can I stop this, I really can't afford wasting any cap???

Thanx:)
 
PC Direct said:
Ooh tough question.. try contacting Eset SA?
Click to expand...

Thanks for reply. I did some research and according to some other forums, the only way to stop this is to uninstall eset. That is total BS:sick:! Smart Security works great for me!

I hope someone can come up with a solution:(
 
Sorry, but I have no idea of what kind of traffic ESET is generating, but in general these rules apply to any app:
If you know the address that it's trying to connect to (hopefully a domain name), then you can include that domain name in the %windir%\system32\drivers\etc\hosts file and redirect it to 127.0.0.1 so that it doesn't connect to the Internet.
If they're using a static IP, then you can add a route table entry to do the same.​

You can use TCPView (part of Microsoft's SysInternals Suite) to see to which address(es) ESET is connecting OR you can use netstat -a from the command-line and hope that the domain name has "eset" in it.
 
Pada said:
Sorry, but I have no idea of what kind of traffic ESET is generating, but in general these rules apply to any app:
If you know the address that it's trying to connect to (hopefully a domain name), then you can include that domain name in the %windir%\system32\drivers\etc\hosts file and redirect it to 127.0.0.1 so that it doesn't connect to the Internet.
If they're using a static IP, then you can add a route table entry to do the same.​

You can use TCPView (part of Microsoft's SysInternals Suite) to see to which address(es) ESET is connecting OR you can use netstat -a from the command-line and hope that the domain name has "eset" in it.
Click to expand...

Ok I know that the ekrn.exe connects to the following ip's : 127.0.0.1 and the same one on another port. Does this mean that it isn't connected to the internet?
 
sitnet said:
Ok I know that the ekrn.exe connects to the following ip's : 127.0.0.1 and the same one on another port. Does this mean that it isn't connected to the internet?
Click to expand...

Yes. 127.0.0.1 is always your own PC. I also noticed that ekrn.exe will double up most of the bandwidth because it first goes through the firewall to be scanned locally, so DUMeter for example will tell you you are using twice the bandwidth when you aren't at all.
 
It could of been another program downloading somthing via http and the traffic router through ekrn

ESET is configured to redirect certain traffic through ekrn.exe it order to scan it in real time
 
mh348 said:
It could of been another program downloading somthing via http and the traffic router through ekrn

ESET is configured to redirect certain traffic through ekrn.exe it order to scan it in real time
Click to expand...

I read that somewhere else to, so that might just be the situation. Thnx for the reply:)
 
Ekhaatvensters said:
Yes. 127.0.0.1 is always your own PC. I also noticed that ekrn.exe will double up most of the bandwidth because it first goes through the firewall to be scanned locally, so DUMeter for example will tell you you are using twice the bandwidth when you aren't at all.
Click to expand...

Oh ok, the problem is that it shows on my telkom usage tracker. So that must mean that I have actually downloaded, right?
 
eh? eset doesn't use bandwidth unless it's updating... I know there's a log that shows eset is doing the same amount of bandwidth as what you using thus leading to believe that you using double but that is not the case...

check your output vs input via your router... you may have a trojan
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X