The only similar file I have set to allow in sygate is the Kernel32.dll in C:\Windows\ system. Suggest you go to Start/Find and enter nyoskrnl.exe in the box and see where it is. If it shows up in sygate I suggest you block it. Incidentally, I have Win 98SE and assume you have Win XP (You didn't say!) so things could be different. It could be a system file trying to contact home (Bill Gates).