fichier ntoskrnl

bonjour,
a chaque que je me connecte a internet le fichier ntoskrnl cherche a se
connecter a une ip
distante, comment puis je desactiver cela sans passer par le fire wall ,
qui lui le stoppe ?
et qu'est ce que ce fichier ?

merci, voici ce que m'affiche le fire wall concernant le fichier :

The executable has changed since the last time you used:
C:\WINDOWS\System32\ntoskrnl.exe
File Version : 5.1.2600.1151 (xpsp2.030422-1633)
File Description : Noyau et système NT
File Path : C:\WINDOWS\System32\ntoskrnl.exe
Process ID : 4 (Heximal) 4 (Decimal)

Connection origin : remote initiated
Protocol : TCP
Local Address : mon ip
Local Port : 445 (CIFS - Common Internet File System)
Remote Name :
Remote Address : 81.50.27.134
Remote Port : 3328

Ethernet packet details:
Ethernet II (Packet Length: 62)
Destination: 00-00-01-00-00-00
Source: 01-00-20-00-01-00
Type: IP (0x0800)
Internet Protocol
Version: 4
Header Length: 20 bytes
Flags:
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset:0
Time to live: 127
Protocol: 0x6 (TCP - Transmission Control Protocol)
Header checksum: 0x4cdf (Correct)
Source: 81.50.27.134
Destination: 81.50.27.249
Transmission Control Protocol (TCP)
Source port: 3328
Destination port: 445
Sequence number: 2740222202
Acknowledgment number: 0
Header length: 28
Flags:
0... .... = Congestion Window Reduce (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...0 .... = Acknowledgment: Not set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..1. = Syn: Set
.... ...0 = Fin: Not set
Checksum: 0x383e (Correct)
Data (0 Bytes)

Binary dump of the packet:
0000: 00 00 01 00 00 00 01 00 : 20 00 01 00 08 00 45 00 | ........
.....E.
0010: 00 30 42 98 40 00 7F 06 : DF 4C 51 32 1B 86 51 32 |
.0B.@....LQ2..Q2
0020: 1B F9 0D 00 01 BD A3 54 : 78 FA 00 00 00 00 70 02 |
.......Tx.....p.
0030: 40 00 3E 38 00 00 02 04 : 05 AC 01 01 04 02 |
@.>8..........

--
svp, me repondre sur le forum, adresse antispam

please answer me on the forum, antispam adress