Take a look in the Sygate Applications, you will see how easy it is to change the allowed programs from allow to ask to block.
Is this just a notification that nt kernel & system have changed?
Sygate is very easy to 'reset' by simply removing all the applications on the list & starting from scratch as you have probably just been through.
As a program tries to access the internet, like IE or Email etc you will be asked to allow, ask or block.