Solutions for serious CPU usage of ESS & EAV

From waiting for s blog

ESET anti-virus software has always been known for its low resource usage and low CPU consumption. However, many friends (especially friends in mainland China) have responded that ESS & EAV has serious intermittent CPU usage.
In fact, the CPU usage of ESS & EAV is very serious. The vast majority of them are high CPU usage of ekrn processes, and most of them use thunder or similar download software.
Principle

ESS & EAV is very sensitive to file tampering-this is also a major cause of virus infection.
The downloading process of thunder is actually to simulate the process of virus tampering with files:
Because when downloading an object, thunder first obtains the size of the object to be downloaded.
Create a. td file of the same size on the hard disk.
Then download and replace the downloaded data with the content in the original. td file.
Download to 100%. Download is complete
You can imagine that there is a file in the system with the same size, but the file remains unchanged. How can ESS and EAV, including NOD32, let him go? So every time thunder changes, ESS and EAV, including NOD32, scan once. The higher the network speed, the faster the download speed, and the more files are modified, the more frequently the scanning speed is, the corresponding system CPU resources will be continuously occupied. The larger the file, the longer the Occupied time ......
Solution

It is easy to solve the serious CPU usage problem of ESS & EAV.
You only need to prevent anti-virus software from scanning thunder to download temporary files.
In other words, add the temporary files of thunder to the ThreatSense exclusion of ESS & EAV.
Operation

Add the suffix "TD" to auto scaling, EAV, and NOD32 scanning exclusion.
Take ESS and EAV as Examples
SETUP (Advanced Settings)-> Real-time file system protection (Real-time file monitoring)-> ThreatSense engine parameter setup (ThreatSense engine parameter settings) -> extend-> Add "td" (excluding quotation marks) to the exclusion item
SETUP (Advanced Settings)-> Web access protection (network access protection)-> ThreatSense engine parameter setup (ThreatSense engine parameter settings) -> extend-> Add "td" (excluding quotation marks) to the exclusion item
Now, try again, the CPU usage and ekrn process usage are greatly reduced!
Note:

In this method, do not add thunder as an exception. In order to ensure system security (the thunder 0-day problem ).
P.S.

Thunder's TD files are excluded, so you don't have to worry about affecting system security. First, Thunder has embedded four anti-virus modules, namely Kabbah, Kingsoft, rising star, and Jiangmin, from the 5th generation, therefore, the system security can be maintained during the basic download process, and thunder will be canceled after the download is complete. if the extension name is not excluded, ESS & EAV will help us properly disable it.
Make ESS (EAV) Your thunder anti-virus Module
For ESET NOD32 (2.X)
Many of our friends complained that the anti-virus software of ESET was not identified by thunder. If your computer installed ESET NOD32 (2.X, use the automatic detection function of thunder (interface-> tool-> Configuration-> download security-> "Automatic Detection" button) yes, it can be identified and installed (make sure your thunder version is at least 5.8 ).
For ESS (EAV)
ESS (EAV) cannot use the above method, but in fact, ESS (EAV) can also be placed in thunder, need to be manually set, the method is as follows:
Take ESS as an example. In thunder, choose interfaces> Tools> Configuration> Download Security> browse.
X: Program FilesESETESET Smart Securityecls.exe (X is the drive letter of the ESS). Just click OK.
Here, we want to explain that ecls.exe is actually the command line file search module of ESS (EAV). Therefore, when you use thunder to download the file, the CMD window will pop up. Please do not be nervous, instead of starting a virus, but your ESS (EAV) is scanning and preventing viruses from your downloaded files.
Last

I wish you peace of mind when using auto scaling, and feel at ease when using thunder.
Supplement

Not just thunder: in fact, it is not just thunder that is prone to this situation. There are many similar principles, such as FlashGet express and Tuotu rabbit removal. If you are using the above software, you should also add the corresponding file suffix to the exclusion list (for example, express's "jc" (excluding quotation marks ))
Believe that ESET is OK: Just like a computer that does not install several anti-virus software at the same time, many system tools are now resident in the system tray, such as security guard 360 and Super Rabbit, in fact, in addition to optimizing and eliminating garbage for the system, do not let too many such tools reside in the memory, because sometimes this will also cause high system resource consumption. In addition, the software development team may have a devastating impact on the system due to the poor strength and technology of the software development team. (We should have seen a lot of false positives and false positives) So please trust ESET products! However, here, Xiaosheng still recommends several types for you:
Cleaning rogue software-360 security guard
Cleanup system spam-Super Rabbit
Other options-Kingsoft cleaning expert