Mystery Alert

[Guest Hagar]

I get the following message window pop up at approximately hourly intervals:

 

An application named NT Kernel & System (file name ntoskrnl.exe) has been

blocked from accessing the network.

There is a "Do not show this window again" box, and even though I place a

check mark into the box, the window keeps popping up.

 

My question is this:

Is the Kernel & System thing something that needs to access the network?

Can it be hunted down and deleted?

What is blocking it (I run a Sygate Firewall and McAfee Security center) ?

 

Any help would be appreciated.

 

TIA,

 

Hagen Sahm

[Guest Colin Barnhorst]

Re: Mystery Alert

 

Please post the exact error message. "Kernel and System" is essentially the

heart of the OS. Obviously deleting it is not an option. You need to be

specific, especially by what you mean by "network."

 

"Hagar" <hsahm@surewest.net> wrote in message

news:xYydnflt1NYxqnjanZ2dnUVZ_rqlnZ2d@giganews.com...

>I get the following message window pop up at approximately hourly

>intervals:

>

> An application named NT Kernel & System (file name ntoskrnl.exe) has been

> blocked from accessing the network.

> There is a "Do not show this window again" box, and even though I place a

> check mark into the box, the window keeps popping up.

>

> My question is this:

> Is the Kernel & System thing something that needs to access the network?

> Can it be hunted down and deleted?

> What is blocking it (I run a Sygate Firewall and McAfee Security center) ?

>

> Any help would be appreciated.

>

> TIA,

>

> Hagen Sahm

>

[Guest Hagar]

Re: Mystery Alert

 

This IS the exact error message:

"An application named NT Kernel & System (file name ntoskrnl.exe) has been

blocked from accessing the network."

 

It is in a light blue box, which appears on the bottom right of the desktop.

At the bottom of the box there is also a little square checkbox and the

text: "Do not show this window again" next to it. Even though I checked the

box many times, it seems to have no effect.

 

The file, incidentally is located in two places:

Windows\Ststem32 (2,0864KB)

Windows Driver Cache\i386 (2,129KB)

 

Hagen

 

"Colin Barnhorst" <c.barnhorst@comcast.net> wrote in message

news:2AE49E78-BB61-4AD5-ACC0-CC0A70FDA310@microsoft.com...

> Please post the exact error message. "Kernel and System" is essentially

> the heart of the OS. Obviously deleting it is not an option. You need to

> be specific, especially by what you mean by "network."

>

> "Hagar" <hsahm@surewest.net> wrote in message

> news:xYydnflt1NYxqnjanZ2dnUVZ_rqlnZ2d@giganews.com...

>>I get the following message window pop up at approximately hourly

>>intervals:

>>

>> An application named NT Kernel & System (file name ntoskrnl.exe) has been

>> blocked from accessing the network.

>> There is a "Do not show this window again" box, and even though I place a

>> check mark into the box, the window keeps popping up.

>>

>> My question is this:

>> Is the Kernel & System thing something that needs to access the network?

>> Can it be hunted down and deleted?

>> What is blocking it (I run a Sygate Firewall and McAfee Security center)

>> ?

>>

>> Any help would be appreciated.

>>

>> TIA,

>>

>> Hagen Sahm

>>

>

[Guest VanguardLH]

Re: Mystery Alert

 

"Hagar" wrote in message

news:xYydnflt1NYxqnjanZ2dnUVZ_rqlnZ2d@giganews.com...

>I get the following message window pop up at approximately hourly

>intervals:

>

> An application named NT Kernel & System (file name ntoskrnl.exe) has

> been blocked from accessing the network.

> There is a "Do not show this window again" box, and even though I

> place a check mark into the box, the window keeps popping up.

>

> My question is this:

> Is the Kernel & System thing something that needs to access the

> network?

> Can it be hunted down and deleted?

> What is blocking it (I run a Sygate Firewall and McAfee Security

> center) ?

 

 

McAfee Security Center is bundleware and includes a firewall. So why

are you running 2 firewalls?

[Guest William R. Walsh]

Re: Mystery Alert

 

Hi!

> An application named NT Kernel & System (file name ntoskrnl.exe)

> has been blocked from accessing the network.

> Is the Kernel & System thing something that needs to access the

> network?

 

I wouldn't say it is impossible, but applications and services should access

the network by themselves if need be.

> Can it be hunted down and deleted?

 

You can't delete the kernel, as it is the core of the OS.

 

The nature of the alert and the fact that you can't suppress it permanently

makes me wonder if your system has been compromised by something like a

rootkit.

 

You might consider running just one firewall. Using more than one software

firewall at once is not really a great idea.

 

William