PDA

View Full Version : Problem with Track-It! Help Desk Software


angelo_lopes
October 31st, 2008, 09:55 AM
Track-It! Help Desk Software relies on the process Audit32.exe to audit my network computers hardware and software. Computers keep "collecting" the Audit32.exe icon on the systray, and Task Manager shows lots of Audit32.exe processes running.

203698

The only way to avoid this I found was to Exclude Program Files from being scanned, but this is too dangerous. Any clue?

Thanks in advance

SmackyTheFrog
October 31st, 2008, 10:33 AM
Use FileMon to monitor the ekrn.exe or Audit32.exe process and see what is being scanned to cause this kind of re-initialization loop. To be clear, is Audit32.exe the server service to the application or an endpoint client process? If it is a server process, you should configure Nod32 to exclude the database and log files from scanning or conflicts arise. This is a best-practice for any application running a database.

angelo_lopes
October 31st, 2008, 01:13 PM
As far as Numara Software (http://www.numarasoftware.com/Track-It.asp) told us, only Program Files is being scanned. Track-It! looks for .exe files to audit installed software. Audit32.exe is an endpoint client process.

SmackyTheFrog
October 31st, 2008, 01:32 PM
If that is the behavior and function of the software, odds are you will just need an exclusion set up for it. It is acting as a sort of scanning engine and will generate a bunch of filesystem activity which can cause conflicts with your AV product, much in the same way running two different antivirus products on the same PC could. The most likely scenario is that Audit32.exe tries to open another .exe file, the Nod32 kernel jumps in and grabs the file to scan and Track-It doesn't handle this gracefully and spawns a new process.