Kerio Firewall causes CPU usage in explorer.exe

[Zxian]

Hey everyone,

I'm having a small problem with Kerio Personal Firewall 4.1.2. When I have it running, explorer.exe is always running at about 15-20%, even when I'm just sitting there idle or right after booting up.

Here's a copy of my HijackThis log... I can't really spot anything funny there...

Logfile of HijackThis v1.97.7

Scan saved at 22:11:37, on Dec 07/2004

Platform: Windows XP SP1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Eset\nod32krn.exe

C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe

C:\Program Files\Eset\nod32kui.exe

C:\Program Files\WinKey\WinKey.exe

C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe

C:\WINDOWS\System32\taskmgr.exe

C:\Program Files\Maxthon\Maxthon.exe

G:\-=Installs=-\HijackThis.exe

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll

O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE

O4 - HKLM\..\Run: [scriptSentry] C:\Program Files\Script Sentry\ScriptSentry.exe /check

O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto

O4 - HKCU\..\Run: [AVEDESK] "C:\Program Files\AveDesk\AveDesk.exe"

O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe

O4 - Global Startup: WinKey.lnk = C:\Program Files\WinKey\WinKey.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)

O9 - Extra button: Research (HKLM)

O9 - Extra button: Related (HKLM)

O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)

O10 - Broken Internet access because of LSP provider 'imon.dll' missing

O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1102480988621

Also, I just ran a Trojan Scan... nothing came up.

This is the case even right after a clean install of Windows...man...

The moment that I close Kerio (not just disable it), explorer goes back to normal. I've checked on the Kerio forums, but with no luck. There are apparently a couple of other people there who have had the same problem, but no one has replied.

Does anyone know why this happens?

[MCT]

its probly a memory leak in kerio that will probly be fixed in the new version (usually once its reported they look into it)

i dont have this problem & i have that version running

[Zxian]

Maybe... but in the meantime... I've moved onto Sygate... it uses a bit less memory and lets my system be idle...

I'll probably check back with Kerio when they release a new version. Apparently there's some talk about a complete rewrite of the kernel.