ntoskrnl.exe keeps popping up?

edited July 2007 in Science & Tech
why does my NTOSKRNL.EXE keep trying to go online (actually I think it's mostly an incoming ping)? I have my firewall set to block it and it keeps randomly popping up as being blocked. I can't find any info on what is causing it to try and communicate. I'm running XP (auto updates) with Sygate personal firewall, NOD32, and I also run AdAware, Spybot, and Spywareblaster. A HijackThis run didn't show anything suspicious that I could tell.

The ping is from 192.168.1.102, MAC 00-18-DE-52-F0-00, source 1371, TCP protocol. Which seems to be from my local network? I have a Linksys router, motorola cable modem, and a Canon printer (USB) hooked to the PC.

Having it blocked doesn't seem to affect the operation of the PC, the main problem is it's annoying. Sometimes the thing pops up every few minutes, sometimes hardly at all. Was playing a game last nite and the block kept dumping me to desktop (very annoying!). Didn't close the game, just minimized it, so I could get back to playing quickly at least

Is this legitimate and should just allow it to communicate?

WTF! Now I'm getting it on my work PC! Looks like it's the NT Kernel & System (naturally based on the name!) and Sygate has blocked 92 incoming, allowed 15307 incoming, and has allowed all outgoing traffic.

Comments

  • kryystkryyst Ontario, Canada
    edited July 2007
    ntoskrnl.exe is a critical process in the boot-up cycle of your computer although should never appear in WinTasks whilst under normal circumstances Note: ntoskrnl.exe can be altered by the w32.bolzano and variants. If this process appears in WinTasks, please update your virus definitions immediately.
Sign In or Register to comment.