I don't know if this is a NOD32 problem, or a Comodo problem-- I posted over at Comodo as well. Anyway, here is the problem I am having with v3 of NOD32 (note that there was no issue with v2): If I have HTTP checking enabled in NOD32, then applications that access the network are reported to Comodo as ekrn.exe, which is the NOD32 service. This makes it impossible to create specific application rules in Comodo, as all applications report as ekrn.exe. The only thing I can think of is NOD32 must set up some type of proxy server below the visibility of Comodo, making all network enabled applications appear as ekrn.exe. Of course, disabling HTTP checking completely cures the problem. Suggestions?