Wilders Security Forums  

Go Back   Wilders Security Forums > Archived Forums > Closed Sub-Forums > Archived ESET Support Forums > NOD32 version 2 Forum
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old April 24th, 2004, 09:50 AM
rdsu's Avatar
rdsu rdsu is offline
Massive Poster
 
Join Date: Jun 2003
Location: pt
Posts: 4,119
Default Suggestion

Hi,

It's possible to implement in the future release, to protect that the "nod32kui.exe" and "nod32krn.exe" can be killed from Task Manager?

It's a nice protection that Kaspersky already have...

Thanks and keep the excelent work
__________________
.
Packet Filter > System & Programs Updated > Common Sense > Backup
  #2  
Old April 24th, 2004, 05:59 PM
sir_carew's Avatar
sir_carew sir_carew is offline
Frequent Poster
 
Join Date: Sep 2003
Location: Santiago, Chile
Posts: 884
Default Re: Suggestion

Hello,
I'm agree with you,
We know that is technical impossible protect a process from being killed in a admin account, but why not try to enhance the protection like ZA and KAV?
I know that if you want to do dangerous actions like navigate in Internet is recommend that you do all of this in a limited account, but in XP all acounts created are admin by default and the typical user doesn't know that.
__________________
- ASUS M4A79 Deluxe
- ASUS HD 5770 CuCore
- AMD PHENOM II X4 965 @3.7 NB 2400
- 4GB DDR2 KINGSTON HYPER X 800 MHZ 5-5-5-15 T1
- SAMSUNG SSD 470 SERIES 64 GB
- SEAGATE SATAII 1 TB
  #3  
Old April 24th, 2004, 10:20 PM
docfleetwood docfleetwood is offline
Infrequent Poster
 
Join Date: Apr 2004
Posts: 36
Default Re: Suggestion

Hello all. I agree, NOD should have this ability. But just in case you didn't know, there is a program called process guard by DiamondCS that stops programs from being shut down by a variety of methods in addition to task manager - I was shocked at the number of ways this can be done. The advantage of PG is that you can protect many of your security programs that don't have the protection built in. You should check it out if you haven't seen it. Just FYI.
  #4  
Old April 25th, 2004, 06:18 AM
Marcos Marcos is offline
Eset Moderator
 
Join Date: Nov 2002
Posts: 14,195
Default Re: Suggestion

Even processes protected by DiamondCS or having a kind of protection implemented CAN be killed. Though it's not that easy as without protection, but it's still possible.
  #5  
Old April 25th, 2004, 07:18 AM
steve1955's Avatar
steve1955 steve1955 is offline
Very Frequent Poster
 
Join Date: Feb 2004
Location: Sunny(in my dreams)Manchester,England
Posts: 1,237
Default Re: Suggestion

If you password protect Kav settings you cannot end proccess(avpm.exe) using task manager even if logged as an admin account I would like that level of protection(at least) built into NOD then at least it cannot be disabled accidentally
__________________
The part of a computer that causes most problems is the bit that holds the mouse!
  #6  
Old April 25th, 2004, 12:15 PM
rdsu's Avatar
rdsu rdsu is offline
Massive Poster
 
Join Date: Jun 2003
Location: pt
Posts: 4,119
Default Re: Suggestion

I fogot to say about the password protection of Kaspersky on my first post...

I think that this is a great feature...
__________________
.
Packet Filter > System & Programs Updated > Common Sense > Backup
  #7  
Old April 25th, 2004, 03:29 PM
steve1955's Avatar
steve1955 steve1955 is offline
Very Frequent Poster
 
Join Date: Feb 2004
Location: Sunny(in my dreams)Manchester,England
Posts: 1,237
Default Re: Suggestion

password protection is available with nod but it doesn't act the same way with task manager
__________________
The part of a computer that causes most problems is the bit that holds the mouse!
  #8  
Old April 25th, 2004, 05:20 PM
sir_carew's Avatar
sir_carew sir_carew is offline
Frequent Poster
 
Join Date: Sep 2003
Location: Santiago, Chile
Posts: 884
Default Re: Suggestion

Quote:
Originally Posted by Marcos
Even processes protected by DiamondCS or having a kind of protection implemented CAN be killed. Though it's not that easy as without protection, but it's still possible.

Hi Marcos,
Yes, you can kill the process, however while the process is more protected, better.
__________________
- ASUS M4A79 Deluxe
- ASUS HD 5770 CuCore
- AMD PHENOM II X4 965 @3.7 NB 2400
- 4GB DDR2 KINGSTON HYPER X 800 MHZ 5-5-5-15 T1
- SAMSUNG SSD 470 SERIES 64 GB
- SEAGATE SATAII 1 TB
  #9  
Old April 25th, 2004, 05:27 PM
rdsu's Avatar
rdsu rdsu is offline
Massive Poster
 
Join Date: Jun 2003
Location: pt
Posts: 4,119
Default Re: Suggestion

I know steve1955, I only forgot to mention...
__________________
.
Packet Filter > System & Programs Updated > Common Sense > Backup
  #10  
Old July 21st, 2004, 03:21 PM
rdsu's Avatar
rdsu rdsu is offline
Massive Poster
 
Join Date: Jun 2003
Location: pt
Posts: 4,119
Default Re: Suggestion

So, the developers of NOD32 will make this feature into NOD32?

Thanks
__________________
.
Packet Filter > System & Programs Updated > Common Sense > Backup
  #11  
Old July 21st, 2004, 06:16 PM
Mele20's Avatar
Mele20 Mele20 is offline
Former Poster
 
Join Date: Apr 2002
Location: Hilo, Hawaii
Posts: 2,495
Default Re: Suggestion

What KAV are you talking about? I have KAV 4.5 trial on this box and all I have to do is right click on the icon in the systray and select exit. I would not want any further protection. I need to kill the AV anytime I download and install applications and KAV is much simpler on this issue than is NOD32 where you cannot just disable AMON. You have to kill NOD32 because it still runs in the background even with AMON disabled. I don't like this. I think KAV is the best AV I've tried for ease in user killing and restarting. The only thing I would like to see is the AV (KAV, NOD32,etc) do something to remind me that it is not running after X number of minutes. I believe I saw screen shots of the latest NAV that has this feature.
  #12  
Old July 21st, 2004, 07:17 PM
rdsu's Avatar
rdsu rdsu is offline
Massive Poster
 
Join Date: Jun 2003
Location: pt
Posts: 4,119
Default Re: Suggestion

I don't know if the others have the same feature, but in KAV 5.0, we can't kill the KAV using the TaskManager...

I think this is a great feature...
__________________
.
Packet Filter > System & Programs Updated > Common Sense > Backup
  #13  
Old July 21st, 2004, 08:55 PM
rumpstah's Avatar
rumpstah rumpstah is offline
Frequent Poster
 
Join Date: Mar 2003
Posts: 486
Default Re: Suggestion

In the beta I have, the process can not be killed (at least casually through task manager (nod32krn.exe)). The control center/gui, however, can be killed (nod32kui.exe).

Last edited by rumpstah : July 21st, 2004 at 09:10 PM. Reason: amendment
  #14  
Old July 21st, 2004, 08:58 PM
rdsu's Avatar
rdsu rdsu is offline
Massive Poster
 
Join Date: Jun 2003
Location: pt
Posts: 4,119
Default Re: Suggestion

But it will be very handy if we have both files protected...
__________________
.
Packet Filter > System & Programs Updated > Common Sense > Backup
  #15  
Old July 21st, 2004, 09:02 PM
arrowsmithmidwest's Avatar
arrowsmithmidwest arrowsmithmidwest is offline
Regular Poster
 
Join Date: May 2004
Location: Midwest
Posts: 165
Default Re: Suggestion

i would prefer it that we can kill those process's.
i need to troubleshoot computers and sometimes when computers are hanging from NOD i can kill those processes mentioned above to get them running again. i know there is other ways around it, but i would prefer quickest.
  #16  
Old July 21st, 2004, 09:59 PM
bsilva's Avatar
bsilva bsilva is offline
Frequent Poster
 
Join Date: Mar 2004
Location: MA, USA
Posts: 238
Default Re: Suggestion

I have setup in my firewall for it not to allow to kill NOD32 proces or any other without my permission. Tiny firewall 6.0
__________________
Brian
  #17  
Old July 21st, 2004, 11:08 PM
sir_carew's Avatar
sir_carew sir_carew is offline
Frequent Poster
 
Join Date: Sep 2003
Location: Santiago, Chile
Posts: 884
Default Re: Suggestion

Latest released version indeed has nod32krn.exe process protected but only if you're using a limited account under NT based systems like XP or 2k. If you're logged in a administrator account, then you can kill nod32krn.exe proccess however NOD restart it service itself if NOD detect that it was killed.
__________________
- ASUS M4A79 Deluxe
- ASUS HD 5770 CuCore
- AMD PHENOM II X4 965 @3.7 NB 2400
- 4GB DDR2 KINGSTON HYPER X 800 MHZ 5-5-5-15 T1
- SAMSUNG SSD 470 SERIES 64 GB
- SEAGATE SATAII 1 TB
  #18  
Old July 21st, 2004, 11:59 PM
Mele20's Avatar
Mele20 Mele20 is offline
Former Poster
 
Join Date: Apr 2002
Location: Hilo, Hawaii
Posts: 2,495
Default Re: Suggestion

So then how do you kill it completely for software installations? I don't want anything that is a hassle to kill. That is why I like KAV 4.5. I can completely kill by right click exit on its icon in the systray. That is how it should be. But it should tell after x number minutes that I need to restart it.
 

Wilders Security Forums > Archived Forums > Closed Sub-Forums > Archived ESET Support Forums > NOD32 version 2 Forum « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 01:20 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums