Sygate always pops up saying that 'ntoskrnl.exe' has changed since I lasted used and if I want to allow it to access the network... wtf is it? Should I allow it? I always block it, and have it perm. blocked yet but I still get nagged... If it matters, the traffic is Outgoing using UDP protocol.

What version are you using? Did a quick google search and people are saying they're having ussues with version 5.6 and the pop-up window regarding "ntoskrnl". Also if you can go back to version 5.5 that seems to fix it.

Also, not sure what version they're up to but the site that I saw this on was from January this year.

8-)

Also, I may or may not have helped you at all.

ntoskrnl.exe info

I tell Sygate to let it through. So far it has only had incoming and all were automatically blocked.

EDIT: I'm using v5.5.2637

last edited by Seven at 13:39:13 23/Feb/05

I am running v5.5

OK so it is a boot-up file etc, but why does it want to use teh intarweb ??

last edited by rodolphe at 13:56:28 23/Feb/05

http://www.liutilities.com/products/wintaskspro/processlibrary/ntoskrnl/

Description:
ntoskrnl.exe is a critical process in the boot-up cycle of your computer although should never appear in WinTasks whilst under normal circumstances Note: ntoskrnl.exe can be altered by the w32.bolzano and variants. If this process appears in WinTasks, please update your virus definations immediatly.

I dun have WinTasks installed so I don't know if it would show there or not... It doesn't show in Windows Task Manager if that makes any difference.

if it's critical to the boot up process, maybe it's also a part of what makes dhcp and stuff gogogo?

but i alwats block it and stuff always gogogoes