svchost & nod32krn.exe

Discussion in 'NOD32 version 2 Forum' started by sir_carew, Feb 21, 2004.

Thread Status:
Not open for further replies.
  1. sir_carew

    sir_carew Registered Member

    Joined:
    Sep 2, 2003
    Posts:
    884
    Location:
    Santiago, Chile
    Hello,
    I'm using Process Guard free version. I've that for protect nod32krn.exe. When I'm reading the PG's log appear that svchost.exe tried to gain write access on nod32krn.exe. If I restart the computer, once more svchost.exe tried to write on nod32krn.exe
    Both file are malware free and are original.
    Why occur that?
    Thanks.
     
    sir_carew, Feb 21, 2004
    #1
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,097
    Location:
    Texas
    I'm no expert on this. I understand Nod inserts an entry in the winsock as a layered service provider.
    Doing this can cause conflicts under certain circumstances.
    The slow shutdown issue is somehow related to Imon being in the winsock.
    The ability to use a layered service provider is built into the XP operating system for instance.
    Here is a link for you.

    http://www.freedom.net/support/article_partners.html?article=390

    That may or may not be the reason for the activity you describe. :)
     
    ronjor, Feb 21, 2004
    #2
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...