Kernell32 unknown parent process requests for an outbound connection-Is this normal??

Published by: anonym 2009-01-07

I just want to address a problem of a somewhat 'mysterious' origin since I don't expect this from a freshly installed Windows 98 SE and an Outpost Firewall Personal Pro 2.5.369.4608 (369).

My kernell32.dll is like acting 'weird' this past few days lately right after I installed the Outpost Firewall and is even requesting an outbound connection to the network even with/without a connection to the Internet. Eerie, huh?!?! Because of this incident, I always make sure that I always BLOCK the component, (or whatever it is that is trying for a request of an
outbound connection to the network) just to be very, very sure of my security and to prevent some futher comprimises to our security and privacy that would lead to further leaks of sensitive information and exploiting vulnerable points on our system.

I hope that these few attachments of a snapshot view of my Outpost Logs - Blocked Connection Logs, and also the Kernell32.dll that is requesting a network outbound connection, could provide some helpful information if somebody would take the time to deeply analyze it further and make some conclusions out of it.............

I also made a full anti-virus system scan of the operating system just in case if there is a Trojan 'lurking' deep within the system and maybe affecting the kernell32.dll but it didn't found nothing at all. Here are some few snapshots of it:

For some added information, the virus database loaded on our Kaspersky Anti-Virus Personal Pro 4.5.97 is currently 102,647 anti-vitus bases which my friend started updating on Oct. 29, 2004 [Friday] at exactly 4:35:30pm in the afternoon +8:00 GMT.

Thanks for the time reading it and more power to all of the forum members and moderators of the Outpost Firewall Forum! God Bless Us All!

Intel Pentium 4 1.8GHz PC266 128MB (32MB shared video memory)
Conexant SoftV52 56K dial-up modem
Windows98 SE 4.10.2222B w/ Unofficial Service Pack 1.6.2
Internet Explorer 6 w/ Mozilla Firefox 1.0PR as back-up web browser
Agnitum Outpost Firewall 2.5.369.4608 (369), Kaspersky Anti-Virus Personal Pro 4.5.97, Spybot 1.3, Ad-Aware SE Professional 1.05
CWShredder 2.0.0, HijackThis 1.98.2, SpywareBlaster 3.2

Good day & Peace Be With to you, Mr. GoonMan! :)

Thank you very much for taking the time to read and post a reply to my previous post regarding the 'mysterious' behavior of my Kernell32.dll that requests a network outbound connection to the Internet.

Mr GoonMan, I didn't find any Run Kernell32.dll as a DLL under the Options > Application of the Outpost Firewall but I did find a RUNDLL32.DLL application which is under the c:windowsrundll32.exe of my Windows folder. Is this the same as the one you are mentioning on your previous reply? I provided a snapshot view of this, which you can view it later at the bottom of this page, so you can make an analysis of this a little further.

I also installed the latest MDAC 2.5 version, after I've installed the Outpost Firewall, so my Outpost Logfile Viewer will run smoothly as it was mentioned from this forum also.

Thanks again, Mr. GoonMan, and More Power to all of the Forum Members and the Supportive Staff and Moderators of the Outpost Firewall Forum! :D

Hello Ryan,

2 things to check.

1. Look in your Partially Allowed Applications section (Under Options> Applications) and make sure you do not have Run Kernell32 as a dll there. If so remove it. As far as i know you do not need this.

2. Make sure the MDac and Jet drivers are up to date after doing a fresh install of Win98 see this thread Making Outpost Smooth (http://www.outpostfirewall.com/forum/showthread.php?t=9600).