Recent 2.7 kernel update

[T-RHex]

My firewall (kerio 2.5) reported that nod32krn.exe had changed when I reboot this morning -- though I have not turned on this PC for about a week. So about a week ago there must've been an update to the nod32 kernel, but I cannot find anything online mentioning this. The logs just say "Virus signature database has been updated" and nothing about the kernel. The same thing happened maybe a month or two ago (but I let it pass). Is this valid (or is something else changing my .exe)?

Win98SE
nod32 v2.7 2.70.32

Thanks.

[3GUSER]

Version 2 is out of development from many years and officially as of February 2010 . Only virus signature updates are produced and officially support is not provided.

I doubt they have made some improvement or update for this version

[BFG]

Hello T-RHex,

Each time the virus signature database is downloaded and installed it's the kernel that is updated. It should be mentioned in the NOD32 Event log every time you update the virus signature database.

BFG

[loverboy]

Two or three days ago an updatereminder.exe file appeared in the installation directory.
My COMODO firewall (and Defense+) alerted me when nod32krn tried to launch updatereminder.exe

So something did happen indeed in the last few days with v. 2.70.39 ::)

[T-RHex]

-{ Quote: "Hello T-RHex,

Each time the virus signature database is downloaded and installed it's the kernel that is updated. It should be mentioned in the NOD32 Event log every time you update the virus signature database.

BFG" }-
Hi BFG,

If so, it wasn't like that previously. I've been running Nod32 and Kerio on that PC for many years now, and daily definition updates rarely updated the kernel.

Given like 3GUSER said that development ended in Feb. and virus def updates end 2012 (I think), I was curious as to why they'd be updating the kernel. I'll have to check for a updatereminder.exe (thanks for the heads-up loverboy) to see if I've got one now. Perhaps they're getting ready to handle the upcoming support termination.

Edit: I just noticed I have 2.70.32 and loverboy mentioned 2.70.39. Those numbers only go up with kernel updates and not just with virus def updates, if I'm not mistaken.

[agoretsky]

Hello,

Please see this (http://www.wilderssecurity.com/showpost.php?p=1781381&postcount=4) message in the Is UpdateReminder.exe malware? (http://www.wilderssecurity.com/showthread.php?t=286181) message thread for an explanation of this recent update.


The end of life for NOD32 v2.70 was announced earlier this year. Here is the text from the ESET Support News (http://www.eset.com/support/news) section of the web site:January 14, 2010

End of Life announcement for NOD32 v2.7. Current NOD32 Antivirus 2.7 customers can upgrade to ESET NOD32 Antivirus 4 for free. ESET NOD32 Antivirus 4 offers the most current proactive protection technology, is easier to use and has more advanced options for power users. NOD32 Antvirus 2.7 customers will continue to be protected with signature updates until February 1, 2012, but are advised to upgrade to the latest version as soon as possible.

Additional information can be found in the full press release (http://www.eset.com/company/article/ESET-to-discontinue-NOD32-Antivirus-2.7/6974.php?contentID=6974). To learn more about upgrading, see ESET Knowledgebase article #552, "'Upgrading my ESET security product from an earlier version to the latest version — Will it happen automatically? (http://kb.eset.com/esetkb/index?page=content&id=SOLN552)."

As a reminder, version upgrades are free for licensed users, so all customers need do is use their username and password credentials to download a currently supported version of ESET NOD32 Antivirus from ESET's web site in order to maintain their protection.

Regards,

Aryeh Goretsky

[loverboy]

Marcos (in the post you link) says "the end of 2010", while you say February 1, 2012

Do you both mean that updates from trial servers will end at the end of 2010, while those from "regular servers" will end on February 2012?

[agoretsky]

Hello,

Distribution of the installer for the NOD32 v2.70 software ceased a while ago. Signature updates will cease in February, 2012.

Regards,

Aryeh Goretsky

[T-RHex]

Thanks for the input Aryeh. This is on a system running Win98 so upgrading isn't really an option. But I guess you've answered my question then, with "an explanation of this recent update." So the kernel *has* been recently updated, which is all I had wanted to confirm (I could not find any release history for v2.7 on nod32's website).

Thanks,
0xtr