CEO's Blog

Blog Entry of Thursday, July 5th, 2007

SNMP on Windows Vista rendered dysfunctional by NOD32 Anti Virus

Since Vista came out we had a strange problem with our Vista workstations: We were absolutely not able to query them through SNMP (using our PRTG or IPCheck as well as any other SNMP tool). SNMP requests simply timed out and were not returned by these Vista machine, regardless of the version (Vista Business or Ultimate). The SNMP service was properly installed and working, netstat reported nothing unusual.

Then suddenly we found one Vista workstation where SNMP worked fine. After searching for the difference to the other machines we found that it did not have our network’s NOD32 virus scanner installed yet. We installed NOD32 and SNMP did not work any more. We de-installed NOD32 and SNMP was working again.

Our NOD32 configuration is “scan file access only”, we did not enable the Internet and Outlook/Mail scanners. We will try to contact ESET, maker of NOD32, about this issue.

[EDITED June 7th 2007]

We received the following answer from NOD32 and it works for us now:

It sounds like the IMON module is still enabled. Even though you might have unchecked the box, the IMON module still runs in the back ground. Follow the steps below to completely disable the IMON module.

  1. From the bottom right corner of your toolbar, click the NOD32 icon. The ‘NOD32 2.7 Control Center’ window appears.
  2. Open the ‘Threat Protection Modules’ drop down list, then click ‘IMON’.
  3. The ‘IMON - Internet monitor’ window appears. Click ‘Quit’.
  4. The ‘Setup of Automatic Update’ window appears.
  5. Reboot your computer.
  6. From the NOD32 Control Center, verify that the IMON module icon is grayed out.

Please feel free to contact us with any more questions. Thank you!

Regards,
ESET Technical Support

[ADDED September 7th 2007] Note: This problem also applies to WMI access (not only SNMP), see my post from Sep 7th.

Back to the blog