is this an Weakless of NOD32 ?

Discussion in 'NOD32 version 2 Forum' started by goldapple, May 22, 2007.

Thread Status:
Not open for further replies.
  1. goldapple

    goldapple Registered Member

    Joined:
    Dec 22, 2005
    Posts:
    22
    I found NOD32 will be killed just only use two command:

    sc config nod32krn start= disabled
    Taskkill /fi "imagename eq nod32krn.exe" /f

    is this a weakless of NOD32 ? why NOD32 don't have process protection mechanism ?
     
  2. Proactive Services

    Proactive Services Registered Member

    Joined:
    Jan 10, 2006
    Posts:
    153
    Location:
    Petersfield, Hampshire, UK
    You'll also find that deleting system files, moving registry hives, breaking security permissions and disabling your firewall will also break your computer.

    What our suggestions have in common is that you have to be an Administrator to do so. If you run as an Administrator you must accept that malicious code can do what it wants if it manages to infect your computer.
     
  3. jftuga

    jftuga Registered Member

    Joined:
    Mar 9, 2007
    Posts:
    64
    Location:
    Athens, GA
    Could Nod32 monitor for events such as it's service being disabled and then present a warning dialog box and/or email warning?

    -John
     
  4. Proactive Services

    Proactive Services Registered Member

    Joined:
    Jan 10, 2006
    Posts:
    153
    Location:
    Petersfield, Hampshire, UK
    I've known NOD32 to email me a notification when it could not load a driver or experienced other problems but it doesn't seem to do this if the service is disabled - assumedly the service itself is used to send email.

    However, upon a system start when the service is disabled NOD32 does provide an on-screen warning informing the user.
     
  5. lodore

    lodore Registered Member

    Joined:
    Jun 22, 2006
    Posts:
    9,006
    some av's have self protection that stop the av from being stopped.
    e.g. kaspersky and norton.
    i think eset should add it to version 3.0
    i know the service restarts if ended but it can still be disabled is the point.
    lodore
     
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Everything can be disabled if you know how to. NOD32 already has a protection mechanism against killing its kernel process.
     
Thread Status:
Not open for further replies.