What is 'ntoskrnl.exe'?

In my Running Applications window for Sygate (Firewall) it has five entries:

PROTOCOL / STATUS / LOCAL PORT / LOCATION

UDP / LISTEN / 445 / C:\WINNT\system32\ntoskrnl.exe
TCP / LISTEN / 445 / C:\WINNT\system32\ntoskrnl.exe
UDP / LISTEN / 138 / C:\WINNT\system32\ntoskrnl.exe
UDP / LISTEN / 137 / C:\WINNT\system32\ntoskrnl.exe
UDP / LISTEN / 139 / C:\WINNT\system32\ntoskrnl.exe

I keep getting notifications that it is trying to access various sites (Im currently blocking it).

A few other 'Windows Services Applications' I would appreciate some info on are :

Isass.exe, svchost.exe and MSTask.exe.

And finally (phew!) a running application called 'MotiveSB.exe'.

Whiskey14

Hi Navarre,

You can check those and any other programs at one of the following:

http://www.answersthatwork.com/Taskl...s/tasklist.htm

http://www.pacs-portal.co.uk/startup_content.php

Hope this helps!
Lorry

urmod4u

All those are legitime Windows programs (euh, 'MotiveSB.exe' is from AT&T). Even if you find them several times in your system - except for the Isass.exe.
Just note that Isass.exe (uppercase i) is not the same as lsass.exe (lowercase L). Which do you have? L is legitime, I is not (yes, the isass.exe is a malware).

MagikPoo

sysinfo.org
that site is great and also a good google search is alright so this is what i found

ntoskrnl.exe = is a ligit Windows program called "NT OS Kernal" get it, need is say more.

lsass - lsass.exe - Process Information see. : http://www.liutilities.com/products/...library/lsass/

svchost.exe = check here http://www.sysinfo.org/startuplist.p...r=svchost.exe9

MSTask.exe = thats your sceduling agent.

It looks to me that your system is ok all of these look like ligit programs anyway, always check with http://www.sysinfo.org
and do your google search.

MagikPOO OUT!