Engineering Posted August 14, 2009 Posted August 14, 2009 The application affiliated with Eset Nod32 "EKRN.exe" listens to local port 30606 (TCP).The Eset Nod32 version in use is 4.0.437.0... downloaded from original site thus no warez, up to date definitions, and running in background. May be ignorance from my part but could this some sort of security risk?What would this AV need to listen to such port? I'm thinking if EKRN.exe is closed down it could interfere w/ AV functionality... but just blocking (firewall-ing) all it's network traffic may hold it under control.What's this all about? Anyone know anything? Any thoughts, comments or concerns?
lordpake Posted August 17, 2009 Posted August 17, 2009 (edited) It's not a backdoor.EKRN.exe acts as a proxy so it can scan network traffic for malicious activity.Source (Eset official forums) Edited August 17, 2009 by lordpake
Engineering Posted August 18, 2009 Author Posted August 18, 2009 Thank you very much. Appreciate the contribution
rwycuff Posted August 30, 2009 Posted August 30, 2009 nod32 will phone home if yo using cracked stuff
Kelsenellenelvian Posted August 30, 2009 Posted August 30, 2009 (edited) Yes and MS goons are at your door now... :D :DOMG Edited August 30, 2009 by Kelsenellenelvian
rwycuff Posted August 30, 2009 Posted August 30, 2009 Hey the guy asked if it had a back door or anything like that i provided infono need for sarcasim
Kelsenellenelvian Posted August 30, 2009 Posted August 30, 2009 (edited) You didn't provide ANY actual info just a one line false statement...Where is the source to you info?What does it look for and warn about?I have several aquantances that use nod32 and a crack for it, plus ALOT of other pirated material. They have never gotten warned or busted.Myself I got popped, but NOT from any source like Nod32... It was from my ISP... Edited August 30, 2009 by Kelsenellenelvian
CoffeeFiend Posted August 30, 2009 Posted August 30, 2009 The question was answered, and we're quickly drifting towards ban-worthy comments so I'm locking this one.
Recommended Posts