Drivers used by NOD32

Discussion in 'ESET NOD32 Antivirus' started by Sacles, Sep 4, 2012.

Thread Status:
Not open for further replies.
  1. Sacles

    Sacles Registered Member

    Joined:
    Dec 8, 2004
    Posts:
    372
    Location:
    Belgique
    Hello,

    What are the drivers used by NOD32 Antivirus?

    I count 3 drivers. Is this correct?
    1. efavdrv
    2. ehdrv
    3. epfwwwfpr
    I had installed SMART Security (unistalled now) and I wonder if there is not a SMART driver which has not been removed.
     
  2. Janus

    Janus Registered Member

    Joined:
    Jan 2, 2012
    Posts:
    588
    Location:
    Europe - Denmark .
    Hello Sacles

    Not done much research in that field, :D but if I remember correctly, Eset Smart security also use two firewall drivers
    one on startup named , epfwwfp.sys
    and a personal firewall driver called epfw.sys. Just a suggestion Sacles, but
    have you tried to run Eset SysInspector? it should show you, all the drives used by Eset.

    Cheers. Janus.
     
  3. Sacles

    Sacles Registered Member

    Joined:
    Dec 8, 2004
    Posts:
    372
    Location:
    Belgique
    In Eset SysInspector, I have efavdrv: unknown, stopped.
     
  4. Niels

    Niels Registered Member

    Joined:
    Jul 29, 2005
    Posts:
    466
    Location:
    Belgium
    Hello Sacles,

    This are also Eset related drivers:
    efavdrv
    ehdrv
    epfw
    Epfw NDIS Lightweight Filter
    epfwwfp

    Regards
    Niels
     
  5. Sacles

    Sacles Registered Member

    Joined:
    Dec 8, 2004
    Posts:
    372
    Location:
    Belgique
    Hello,

    Yes, but why have I, In Eset SysInspector efavdrv: unknown, stopped?
     
  6. Niels

    Niels Registered Member

    Joined:
    Jul 29, 2005
    Posts:
    466
    Location:
    Belgium
    Hello Sacles,

    That is normal behavior. This isn't a critical Eset service. The only purpose is when you want to create a system inspector logfile, only at that moment the driver will be active. So nothing to worry about. You are protected.

    Regards
    Niels
     
  7. Sacles

    Sacles Registered Member

    Joined:
    Dec 8, 2004
    Posts:
    372
    Location:
    Belgique
    Hello,

    It is in the report of ESET SysInspector that I see "efavdrv: unknown, stopped".

    When the report is generated by sysinpector the driver should be active?

    Regards.
     
  8. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Didn't you run an ESET stand-alone cleaner in the past?
     
  9. Sacles

    Sacles Registered Member

    Joined:
    Dec 8, 2004
    Posts:
    372
    Location:
    Belgique
    Hello,

    No, but I've uninstalled NOD32 several times by the "normal" method (program list in Windows).

    I also tried SMART Security that I uninstalled by the method "normal."
     
  10. Sacles

    Sacles Registered Member

    Joined:
    Dec 8, 2004
    Posts:
    372
    Location:
    Belgique
    Hello,

    The questions are:
    1. Is efavdrv a driver of NOD32 Antivirus?
    2. If yes, why is it disabled?
    3. If not, is it a SMART Security driver and then can I remove it?
     
  11. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    You can remove it. To my best knowledge, it's only bundled with ESET Rogue Application Remover and is removed automatically provided that the cleaner is not terminated unexpectedly.
     
  12. Sacles

    Sacles Registered Member

    Joined:
    Dec 8, 2004
    Posts:
    372
    Location:
    Belgique
    Correct, if I run ERA Remover, the driver efavdrv is active but is it not cleared when the program is finished (after the prompt "Press a key to continue").
     
Thread Status:
Not open for further replies.