What Is Epsecurityservice.exe

16 views
Skip to first unread message

Maricel Fergason

unread,
Aug 5, 2024, 2:43:34 PM8/5/24
to mimidercomp
Whenwe access the system with the problem happening, we find that the memory usage of the PC is quite high, on the occasions I have seen it is 80%-90% in use, and the most memory is being used by a Bit Defender process. Have seen usage of 500MB-800MB.

Now I understand this information is circumstantial, but every customer that has called, with the exact same memory usage errors, are all running Bit Defender and the issue started around the same time, which was around 2 weeks ago.


The Bit Defender appears to be the centrally managed version which is looked after by multiple IT service agents. So the customers I have contact with use a different IT support service agent managing the Bit Defender software for them.


So essentially for now, just seeking to know if there has been any general issues going on with any changes and/or updates to the Bit Defender software that may relate to experiencing this Out Of Memory issue for a Windows Desktop application.


In my Event Log (System), filtered by I get a lot of Resource-Exhaustion-Detector, I was getting a lot of errors about running low on Virtual Memory and it highlights the epsecurityservice.exe (every time) as the main memory consumer every time, e.g.


Again this is circumstantial, but interesting this seems to be that Dot Net Framework applications, and instance of Bit Defender and timing of issue coinciding with this update appear to be a common factor here.


We have exactly the same problems at two customers (Accounting solution from Datev in Germany), WCF Services crash with OutOfMemory Exceptions, also since about 2 weeks. It took us a week to determine the cause, more than 1,500 users were affected.


None of the Bitdefender Logs contained useful information to see what happened. Unfortunately there is still no possibility in BEST to do some kind of Realtime-Monitoring to see what is going on inside of Bitdefender. I already asked Bitdefender support about such a tool in a previous case, but they just wondered why someone could need this. Here's the answer...


we have many 100's of agents deployed, and this all started around the recent software upgrade rollout. Only client it is currently impacting uses Fujitsu Scanners to scan to a DMS system, which was coincidentally updated around the same time. We ripped out Bitdefender and the problems went away, and just redeployed, even with all the scan modules disabled, came back to haunt the client. Have an open support ticket, but all that is recommended is to disable all modules and enable one by one, which is crippling to the end client, and quite intermittent.


We are a software house in Greece and we are developing .Net (C#) applications. From about mid December and on, we are experiencing many uses with clients having BitDefender installed. Out of Memory errors occur on a daily basis. As our program is a email management solution, it's hard to convince the IT depts of the companies to disable the Access Scan modules. Hope Bit Defender solves this.


The clients with these issues we were forced to move them over to a different AV product for now, not the right solution, but the problems ceased concurrent with the move from Bitdefender to a competing product/vendor


We run many terminals with Bitdefender installed on them. Ever since 1st January (when the Bitdefender client was updated) we continuously get errors with our .NET SQL Framework based Windows applications. I had spent a great deal of time checking what the issue was. I even upgraded the RAM on many terminals. Issue still exists.


We're not hiding anything ?. Thanks for reposting here, I will leave it active and merge the two. That post was in a Category which we archived, hence the imposibility of posting anymore. But we will keep this one active.


The current advice from BD is to setup a process type exclusion and see if that resolves, but I'm going to give it a few more days to make sure the crashes have stopped before I apply the exclusion and start re-enabling modules one at a time.


We too have been impacted by this. WPF application .NET 4.6.2. Infrequent and intermittent crashes often reported as out of memory exceptions but not always. It took us a long time to establish the cause which started around the 9th December.


Secondly, it appears as quite strange to me that you suggest that all your customers would open a separate ticket themselves (if it wouldn't be for the mere reason to create a track record) instead of tossing this over to them yourself - with some sort of a raised priority.


Adding to what "VP_NZ" has written earlier today, I can confirm that the recent point release update from 26.0.7.41 to 26.0.10.45 (Bitdefender Internet Security, single user license) did NOT solve the OOM issue: my .NET based app in question continues to reproducibly die six to eight hours after invocation - on an almost entirely idling 16 GB machine.


Just came here to add my experience. We've also experienced the same OOM issues on our .NET applications, causing us to have to remove our Enterprise BitDefender installation from our servers. This has been a nightmare of troubleshooting and down time for my company and clients.


I installed optional .net cumulative update for jan 22 KB5009467 ( W10) on a pc that was crashing an app ( Boxcryptor ) every 24 hrs. So far it has run for nearly 48 hr without the app crashing. It is very early days. The pc spend a very varied amount of time in sleep mode so it may be luck that it has lasted this long.


Thanks everyone posting here for the feedback regarding the out-of-memory issue. We investigated and found that some .NET apps will create and delete strings when running .NET. This process will create an out-of-memory exception without following Microsoft guidelines.


Mike, do you know when the Jan. 28 update will roll out? We are a GravityZone MSP. We have not seen this a lot, but are seeing this with more frequency, even a couple today. The last update on my PC shows "Product version: 7.4.3.146. Engines version: 7.91195 (10851086)."


We've linked it to other symptoms such as non-Bitdefender services and video drivers crashing and/or unable to start, or in my case with my home PC this morning, the PC was on (caps lock light toggles, drive light flashes) but I was unable to wake up the monitors, or "soft" shut down via the power button, and had to power off.


Across several hundred PCs, the size of epsecurityservice.exe ranges from about 200 MB to 800+ MB, and the latter stays at that level even after a restart. Is that a normal size? I didn't count but it looks like a fairly even spread of PCs across that range, in terms of number of PCs per each memory size (200, 250, 300, etc.).


There was a change...if I look back, we had this event 2004 on various random client PCs from October to the first week in January, then a gap, then since Jan. 29 it's only been a select few of our own PCs, but not all. Possibly, we do leave our PCs logged in while we log out most managed PCs nightly (we figure we can install our own browser updates when prompted :) ).


Just following up on this thread to say we did eventually track our issue down to the new (January) version of EPOS Connect headset software. It has a secondary DSEA SDK software it installs that has a massive memory leak. They are releasing an updated version in April-ish 2022, but have a manual update procedure in the meantime. Nothing actually showed this program using as much as 40 GB virtual memory, since Task Manager and other tools showed it as 50-75 MB, but ending that process freed up the memory.


We faced problems with crashing dwm.exe (Windows Desktop Manager) and other programs on PC's that have DSEA SDK installed. I opened a support ticket at EPOS / Sennheiser, and they don't want to know anything about they're software having such a problem. Could you please let me know how you got informed about this SDK that they have such a problem with Memory Leak? did Sennheiser / EPOS confirm this to you?


EPOS does not have a public update yet. They said it should release in late April or May as I recall. Our EPOS support rep immediately knew it was a known issue back on March 3 but they have a workaround with a beta update to the DSEA. Have EPOS look up our ticket 207180 if they can't figure it out. The "quick fix" was to log off and on again, every 48 hours.


epsecurityservice.exe is part of Endpoint Security by Bitdefender and developed by Bitdefender according to the epsecurityservice.exe version information.


Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/2008/2016/2019/Vista/7/8/8.1/10. Supports both 32- and 64-bit Windows.



If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.


Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.


Given the high utilisation across all three apps my assumption was an environmental issue, however I have confirmed that the endpoints could communicate with Elasticsearch for well over a 24 hour period. I have also confirmed that for this time there was adequate storage on the cluster to accept the incoming data.


Is there anything else that could be affecting the agents not being able to ship the relevant logs ?

Can you also provide a way for me to troubleshoot this or gather the relevant logs to provide to yourselves ?

3a8082e126
Reply all
Reply to author
Forward
0 new messages