ntoskrnl.exe

[Macro2]

I installed Pandas Platinum firewall and this window pops up wanting to knw whether I want it to access the internet. What is it and what does it do. I'm using W2K pro. I assume it's part of that OS.

 

[bersl2]

Yeah, it's part of the OS. I wouldn't know best, though, but I've never heard of that part of the OS trying to get network access.

 

[Propellorhead]

I get that with Sygate as well, I have always said yes to it because otherwise it keeps nagging me. Not the best philosophy, i know, but I have heard others who do the same and havent heard of any problems.

 

[Alex]

its part of the OS, in fact its the damn kernel! 😛 but im not sure why it demands internet access... maybe someone with better knowledge of the windows kernel can answer that..

 

[D1gger]

ntoskrnl - ntoskrnl.exe - Process Information

Process File: ntoskrnl or ntoskrnl.exe
Process Name: Microsoft Boot Up Kernel

Description:
ntoskrnl.exe is a critical process in the boot-up cycle of your computer although should never appear in WinTasks whilst under normal circumstances Note: ntoskrnl.exe can be altered by the w32.bolzano and variants. If this process appears in WinTasks, please update your virus definations immediatly.
For More Detailed Process Information Get WinTasks 5 Pro
Author: Microsoft
Part Of: Microsoft Windows Operating System

System Process: Yes
Background Process: Yes
Uses Network: No
Hardware Related: No
Common Errors: N/A

Looks like you might have a problem. This process is not supposed to use the network and can be infected by a virus.

 

[bersl2]

That is exactly what I was thinking. Heh. You guys deal with some pretty sloppy rootkits. I'll bet he's running as an admin, so it didn't even have to privilege-escalate.

 

[Macro2]

I'll just block it and see what happens