Sygate Firewall

[Prester John]

I have just installed the sygate free firewall, very groovy, nice graphs etc

Evry now and then i get a warning that Kernell32 is trying to access or has been activated and do i want to let it communicate with the internet.
Anyone know what that is about?
PJ

 

[ShowMe]

Are you running Windows? What version?

And is is kernel32.exe or kernel32.dll that's trying to access the Internet?

If it's kernel32.exe chances are you're infected with a virus. Purchase a good antiviral software, install it & update it then run a complete scan. You can also find an online scan at http://www.antivirus.com

 

[Skeptoid]

I run Sygate as well. I get the kernel32 thingy once in a while (monthly?). I'm not sure whether it's .exe or .dll but I have no viruses or trojans. I suspect it's Windows trying to call home. I'll note the extension next time it happens and I'll post back.

 

[Prester John]

Windows ME
With me its Kernel32.dll. good, bad or indifferent ?
PJ

 

[FFed]

I used to use Sygate (I now use outpost firewall) with both winME and XP. I have done both, allowing and not allowing and have not had a problem either way. This is a paste of something I found awhile ago when I was looking into the subject.



Products:
Sygate® Personal Firewall
Sygate® Personal Firewall Pro


Operating systems:
All supported operating systems.

Details:
As a rule, if you are unsure about any application you should not allow it to access the Internet. Only the applications that you specifically know what they are should be allowed. Under most cases blocking the windows kernel should not create a problem. However, in some rare instances certain Internet Service Providers (ISP) will send you an ICMP message to verify that you are online and blocking this may cause them to turn off the service. If this happens, simply enable ICMP using the Advanced Rule editor.


To do this open Sygate® Personal Firewall and click on the Tools menu and then on Advanced Rules. You may have to click OK on a warning message before entering the Advanced Rule Editor.
Once you are in the Advanced Rule Editor click Add, this will cause a new rule to come up. Give the new rule a name, such as "Allow ICMP", and click on Allow this traffic option.
Then click on the Ports and Protocols tab and select the ICMP option. Enable Echo Reply - 0 and Echo Request - 8.
Then click OK to add in that rule, and then click OK to exit the Advanced Rule Editor.

From HERE