Wilders Security Forums  

Go Back   Wilders Security Forums > Archived Forums > Closed Sub-Forums > Archived ESET Support Forums > NOD32 version 2 Forum
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old March 7th, 2006, 08:03 AM
duijv023's Avatar
duijv023 duijv023 is offline
Frequent Poster
 
Join Date: Feb 2006
Location: Rijnsburg, Netherlands
Posts: 230
Default Psion workabout communication

Can NOD32 disturb communication with an Psion workabout (handheld device) without communicaton viral code (of course)?
This device communicates via RS232 on YMODEM protocol in a custom made application.

Communication was broken, no log event found in NOD32 logs.
After exclusion of the target directory in IMON, communication was runnig normally.
Is this a coincidence or does it make sense??

Does anybody know?
  #2  
Old March 7th, 2006, 07:11 PM
alglove alglove is offline
Frequent Poster
 
Join Date: Jan 2005
Location: Houston, Texas, USA
Posts: 904
Default Re: Psion workabout communication

Some sort of flow control problem, maybe? Does the problem reappear of you remove the exclusion?
  #3  
Old March 8th, 2006, 04:34 AM
duijv023's Avatar
duijv023 duijv023 is offline
Frequent Poster
 
Join Date: Feb 2006
Location: Rijnsburg, Netherlands
Posts: 230
Default Re: Psion workabout communication

First result was OK after exclusion of the "application.exe"

But we are not sure about this being the solution. Time will tell
  #4  
Old March 8th, 2006, 05:08 PM
NOD32 user's Avatar
NOD32 user NOD32 user is offline
Very Frequent Poster
 
Join Date: Jan 2005
Location: Australia
Posts: 1,766
Default Re: Psion workabout communication

A lot of applications and program controls use network to communicate, usually by binding to 127.0.0.1 or 0.0.0.0 and opening a listening port. Another module or program control in an application is then able to communicate with it, for example the program module that operates the com port may receive it's data and control commands from another part of the same application via a tcp/ip loopback on your loal machine. Of course I do not know about your specific softwrare, and normally it makes no challenge but you can see that if it is doing this then maybe it isn't able to cope with IMON checking it's traffic ...
It's very interesting if you've never done it to use a utility that shows what applications have bindings to what IP's and what ports they have open
HTH
__________________
1. What is right is always The Truth.
2. Every Truth is supported in agreement by every Truth.
3. If the facts would persuade you otherwise, see 1.

ESET Reseller (Australia)
 

Wilders Security Forums > Archived Forums > Closed Sub-Forums > Archived ESET Support Forums > NOD32 version 2 Forum « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 09:03 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums