Whenever a user clicks "Delete" in the dialog that IMON presents when it detects a virus in inbound POP email, the NOD32 Kernel Service service terminates and writes an event to that effect in the System log. My workaround has been to set the NOD32 Kernel Service to restart in 1 minute after such a termination. NOD32 is installed on a Windows 2000 Terminal Server. Can anyone suggest what might be the root cause of the NOD32 Kernel Service service terminating and how to correct it? Thanks.