svchost & nod32krn.exe

Discussion in 'NOD32 version 2 Forum' started by sir_carew, Feb 21, 2004.

Thread Status:
Not open for further replies.
  1. sir_carew

    sir_carew Registered Member

    Joined:
    Sep 2, 2003
    Posts:
    884
    Location:
    Santiago, Chile
    Hello,
    I'm using Process Guard free version. I've that for protect nod32krn.exe. When I'm reading the PG's log appear that svchost.exe tried to gain write access on nod32krn.exe. If I restart the computer, once more svchost.exe tried to write on nod32krn.exe
    Both file are malware free and are original.
    Why occur that?
    Thanks.
     
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,770
    Location:
    Texas
    I'm no expert on this. I understand Nod inserts an entry in the winsock as a layered service provider.
    Doing this can cause conflicts under certain circumstances.
    The slow shutdown issue is somehow related to Imon being in the winsock.
    The ability to use a layered service provider is built into the XP operating system for instance.
    Here is a link for you.

    http://www.freedom.net/support/article_partners.html?article=390

    That may or may not be the reason for the activity you describe. :)
     
Thread Status:
Not open for further replies.