something keeps trying to access krnl386.exe

[Shiva]

I'm running a firewall on my computer, and every once in a while (usually later at night) I can check my log file and it has logged someone trying to access my KRNL386.exe.

No, I'll start off by saying that I know very little about internet security, but if someone is trying to access KRNL386.exe, have they already bypassed my firewall securities?

Secondly, would I know it if they were actually able to access my computer (because I'm guessing that KRNL386.exe is a very important file - based on it's name)?

Lastly, what can I do to increase security, or stop this guy from bothering me?

If it would help, I can try and post one of the logs (next time it happens). Norton's firewall only keeps so many entries in the log, and since I'm on a network there are so many entires that within about 4 hours an event is lost.

[ExarKun]

First If your running Windows thats the baby that keeps it all working..

Now on to the problem, Looks like you might have a Trojan Horse in your computer.. Advice: run a current anti-virus prog NOW!! , Then kick old norton up in high gear by setting your security level a little tighter.

Good luck.. once I wake up I'll be able to assist better

------------------
You Do Not Know The True Power Of The DarkSide
"Quoted By ExarKun From Dark Lords Of The Sith " 4000 Years Before Vader Said It

[Shiva]

I've run the virus scanner on a regular basis... never had a virus.

I have also increased the security as high as I know how. I even went through today and cleaned up rules that were not defined strict enough or deleted rules which allowed access to my computer (if I was not longer using the program which made the rule)

Thanks though

[TonyT]

It sounds like it could be a false alarm from Nortons(these types of programs aren't perfect & do register attacks mistakenly)

or

You have a trojan already that a virus scanner doesn't have definitions for, in which case go download a program called The Cleaner from moosoft.com

or

as you are on a network, one of the other users with permissions is trying to fiddle about in some way, check with the network admin because it occurs at a regular time interval. There may be a program(network maintenance type) that is supposed to run & can't due to the firewall.

[Shiva]

Tony, both Norton AV and that Trojan scanner that u suggested came up with no infected files after scanning all hard drives... although the scanner that u mentioned scanned my hard drives in about 2:30 tops... which was nice because Norton can take over 15 mins. That might be though, because nortan is a general scanner where the one that u suggested is only a trojan scanner.

Cleaner did seem to have some nice features that I could see though. For one, it was easy to navigate and make changes, it was fast... and this is a small thing, but nice pictures.

At any rate, I guess that it's prolly just network traffic or something. If there is a trojan on my system (that neither scanner found) the guy hasn't messed up any of my files (that I've found at least).

Well, if I figure out anything new, I'll prolly past back again.

Thanks