ntoskml.exe is being contacted by a remote computer?

hello boys and girls. I got a problem, my anti virus (norton) says that ntoskml.exe is being contacted by a remote computer, and it has an ip address. The IP address is the address of my router Also this only happens when Im receiving windows updates or if im using live messenger. As far as I know, my computer and wii are the only two things on my network. (i checked it) Does anyone know how to fix this, i searched my computer and i cant find a ntoskml, even went to the directory where it was located. I also have the opportunity to install AVG antivirus but will having two antiviruses conflict with each other, (too many cooks in the kitchen)

sort by: active | newest | oldest
110100101108 years ago
ntoskml looks like a wannabe ntoskrnl (the actual main part of windows)

ntoskml is sure a virus
thematthatter (author)  110100101108 years ago
thats what i thought but i cannot find ntoskml anywhere on my computer and i do full scans every few days.
iirc zonealarm firewall can detect and show the name of the exe file that tries to access something
. Guess I need to bump my font size up a little bit. heehee
NachoMahma8 years ago
. Do you block it? If so, and everything still works, set your router to block it and it won't get as far as Norton. . Do a reverse DNS lookup and see who the address belongs to. If it belongs to MS, you may want to allow it. . It would be a good idea to make sure Norton is up-to-date and then do a virus/malware scan. If the address doesn't belong to MS, download a free virus scanner/fixer or two and scan everything. Don't set them to auto-run at startup - strictly manual - or it may interfere with Norton. You want to scan/fix, not monitor.
thematthatter (author)  NachoMahma8 years ago
I think its the router thats causing it. Symantec reports the IP address of the local network, it started poping up, both ntoskrnl and ntoskml being blocked by the application once i installed my wireless router. But the ntoskml only pop ups during a windows update or if im using live messenger or something Im going to get the other antivirus and scan everything again just to be safe