Drivers used by NOD32

Hello,

What are the drivers used by NOD32 Antivirus?

I count 3 drivers. Is this correct?

1. efavdrv
2. ehdrv
3. epfwwwfpr

I had installed SMART Security (unistalled now) and I wonder if there is not a SMART driver which has not been removed.

 

Hello Sacles

Not done much research in that field, but if I remember correctly, Eset Smart security also use two firewall drivers
one on startup named , epfwwfp.sys
and a personal firewall driver called epfw.sys. Just a suggestion Sacles, but
have you tried to run Eset SysInspector? it should show you, all the drives used by Eset.

Cheers. Janus.

 

In Eset SysInspector, I have efavdrv: unknown, stopped.

 

Hello Sacles,

This are also Eset related drivers:
efavdrv
ehdrv
epfw
Epfw NDIS Lightweight Filter
epfwwfp

Regards
Niels

 

Hello,

Yes, but why have I, In Eset SysInspector efavdrv: unknown, stopped?

 

Hello Sacles,

That is normal behavior. This isn't a critical Eset service. The only purpose is when you want to create a system inspector logfile, only at that moment the driver will be active. So nothing to worry about. You are protected.

Regards
Niels

 

Hello,

It is in the report of ESET SysInspector that I see "efavdrv: unknown, stopped".

When the report is generated by sysinpector the driver should be active?

Regards.

 

Didn't you run an ESET stand-alone cleaner in the past?

 

Hello,

No, but I've uninstalled NOD32 several times by the "normal" method (program list in Windows).

I also tried SMART Security that I uninstalled by the method "normal."

 

Hello,

The questions are:

1. Is efavdrv a driver of NOD32 Antivirus?
2. If yes, why is it disabled?
3. If not, is it a SMART Security driver and then can I remove it?

 

You can remove it. To my best knowledge, it's only bundled with ESET Rogue Application Remover and is removed automatically provided that the cleaner is not terminated unexpectedly.

 

Correct, if I run ERA Remover, the driver efavdrv is active but is it not cleared when the program is finished (after the prompt "Press a key to continue").