stopping users killing nod!

Hi

I'm evaluation Nod32 and the Lan server for our 200+ workstation network. So far i am very pleased with the software, i just have 2 questions.

the main problem i've found is that a user, if they wanted to, can kill the nod32 process from task manager on the workstation. i've found they can kill nod32kui.exe but not nod32krn.exe. the krn.exe stays running but then fails to detect any test virus's (eicar). is there a way to lock this down so that no one can stop nod32 from running.

also another issue is the update time on the remote console, is there a way of updating the information on the clients quickly, often the clients have updated but the changes are not reflected on the console for 15 or so mins.

thanks

Chris

 

As far as i know NODkrn.exe keeps blocking viruses, without a warning. I tested this once by shutting down the nod32kui.exe process and downloading the eicar file. When i restarted the computer it perfectly said in the Threat Log it blocked it.

 

You can set the "report every..." interval in your setup xml files that you send to the clients. Look under "General/Settings/Remote Administration/Interval between connecting to Remote Administration Server" in the NOD configuration editor. By default, it's set to 5 minutes. Yours may have been set to something else somehow?

Jack

 

thanks guys, and yes your right it does still block access to virus'd files, just doesn't tell you which is still fine

and i'll check out those update options

thanks

Chris