Sygate Question

[Matt1eD]

Should I allow this?



http://img92.exs.cx/my.php?loc=img92...ntitled2px.png

[Timmy!!!]

I just did a quick google and came up with this: http://www.liutilities.com/products/...rary/ntoskrnl/

Seems to be fine, its a normal process that runs in the background. However the link does state that it does not use the network, so its attempt to use the network is a bit bizzare!

[Matt1eD]

cheers

can anybody explain the bizarity?

[Matt1eD]

Should I be allowing this one to?

Ndisuio.sys

see

http://www.iceteks.com/articles.php?...e=ndisuio&p=1&

[Olly1234]

Tbh both are windows internal processes and you shouldn't worry too much about them, Ntoskrnl.exe is the OS Core code, it's most likely not tryign to broadcast but more likely just listening to a port, as for ndisuio.sys, that enables Bluetooth and wireless comms in XP so again it's not suprising it's been dectedted by your firewall. Both processes are pretty essential to XP, ntoskrnl especially as if that gets corrupted then you'll be getting a nice BSOD when you boot

[Matt1eD]

Thanks.

Shall I tell Sygate to leave them alone?

[Olly1234]

I think that'd be your best best, ntoskrnl can be hijacked but if you've done a virus scan and it's come back ok then you've got nothing to be conecerned about

[Apex]

Sygate does have protection against hijacking in that it makes md5 hashes of the programs that connect out, and so if that file gets changed it will alert you, also if another program launchers it other then it's self it will alert you.

[Tizz]

*pats sygate on its little fluffy head*