ntoskrnl.exe

[Macro2]

I installed Pandas Platinum firewall and this window pops up wanting to knw whether I want it to access the internet. What is it and what does it do. I'm using W2K pro. I assume it's part of that OS.

 

[bersl2]

Yeah, it's part of the OS. I wouldn't know best, though, but I've never heard of that part of the OS trying to get network access.

 

[Propellorhead]

I get that with Sygate as well, I have always said yes to it because otherwise it keeps nagging me. Not the best philosophy, i know, but I have heard others who do the same and havent heard of any problems.

 

[Alex]

its part of the OS, in fact its the damn kernel! but im not sure why it demands internet access... maybe someone with better knowledge of the windows kernel can answer that..

 

[D1gger]

ntoskrnl - ntoskrnl.exe - Process Information

Process File: ntoskrnl or ntoskrnl.exe
Process Name: Microsoft Boot Up Kernel

Description:
ntoskrnl.exe is a critical process in the boot-up cycle of your computer although should never appear in WinTasks whilst under normal circumstances Note: ntoskrnl.exe can be altered by the w32.bolzano and variants. If this process appears in WinTasks, please update your virus definations immediatly.
For More Detailed Process Information Get WinTasks 5 Pro
Author: Microsoft
Part Of: Microsoft Windows Operating System

System Process: Yes
Background Process: Yes
Uses Network: No
Hardware Related: No
Common Errors: N/A

Looks like you might have a problem. This process is not supposed to use the network and can be infected by a virus.

 

[bersl2]

That is exactly what I was thinking. Heh. You guys deal with some pretty sloppy rootkits. I'll bet he's running as an admin, so it didn't even have to privilege-escalate.

 

[Macro2]

I'll just block it and see what happens