NOD32 constant hdd activity (ekm.exe)

Discussion in 'ESET NOD32 Antivirus' started by ndegroot, Jan 17, 2009.

Thread Status:
Not open for further replies.
  1. ndegroot

    ndegroot Registered Member

    Joined:
    Jan 17, 2009
    Posts:
    1
    I noticed using Process monitor on Vista Business that NOD32 (ekm.exe) is constantly opening and closing files in the c:\Windows\system32\drivers folder, like wdf01000.sys, cmbatt.sys, audioeng.dll, sffdisk.sys, mssmbios.sys, umbus.sys, usbhub.sys, smb.sys, even when there are no active programs.

    I don't understand why NOD would want to repeatly check the driver for the battery (cmbatt.sys)

    This prevents the harddisk to spin down on my laptop. Is this normal behaviour? Can it be changed? It must be part of the realtime scanning, but i assume that the option to exclude files only applies to the full scanning.
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    How can you be sure that the operating system doesn't access thoose drivers? The real-time monitor only scans files that are access either by the oper. system or other applications.
     
Thread Status:
Not open for further replies.