PC Review


Reply
Thread Tools Rate Thread

0-length ntoskrnl.dll (NOT ntoskrnl.exe)

 
 
Ron Aaronson
Guest
Posts: n/a
 
      4th Dec 2006
I have discovered that I have a 0-length
\windows\system32\ntoskrnl.dll file. I believe as the result of a
trojan horse that has been removed. My ntoskrnk.exe file seems to be
uncorrupted. The system seems to run ok except occasionally I will
get a system popup complaining that ntoskrnl.dll is not a valid
Windows image. I reply "ok" to this and the blocked thread seems to
continue normally. ntoskrnl.dll does not seem to exist on my friend's
Windows xp system at all, so I am tempted to remove this file
altogether but am afraid that I will not be able to reboot if I do.
Does anyoe have any recommendations?
 
Reply With Quote
 
 
 
 
NewScience
Guest
Posts: n/a
 
      4th Dec 2006
Have either of you installed any programs that modified the Windows XP boot
screen (the black screen with the scrolling bar), or a program to modify the
Windows Welcome screen (where you login)?

If so, you have overwritten the ntoskrnl.exe - which is the valid Windows XP
ntoskrnl.exe file.
You stated ntoskrnk.exe (did you misspell?)

The current ntoskrnl.exe version is: 5.1.2600.2622

Under Windows XP there is no ntoskrnl.dll in c:\windows\system32


"Ron Aaronson" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I have discovered that I have a 0-length
> \windows\system32\ntoskrnl.dll file. I believe as the result of a
> trojan horse that has been removed. My ntoskrnk.exe file seems to be
> uncorrupted. The system seems to run ok except occasionally I will
> get a system popup complaining that ntoskrnl.dll is not a valid
> Windows image. I reply "ok" to this and the blocked thread seems to
> continue normally. ntoskrnl.dll does not seem to exist on my friend's
> Windows xp system at all, so I am tempted to remove this file
> altogether but am afraid that I will not be able to reboot if I do.
> Does anyoe have any recommendations?



 
Reply With Quote
 
Ron Aaronson
Guest
Posts: n/a
 
      4th Dec 2006
I meant to say ntoskrnl.exe, not ntoskrnk.exe (spelled correctly in
Subject). Anyway, this file does NOT seem to have been corrupted.

Your saying that ntoskrnl.dll does not exist on Windows XP explains
why my friend's system does not have one. Could you then venture a
guess as to why various threads will from time to time result in
windows display a popup saying that ntoskrnl.dll is not a valid
Windows image? Is it just because a 0-length instance of this file
exists in the \windows\system32 directory?

The real question is whether I can safely delete this file and be able
to reboot.


"NewScience" <(E-Mail Removed)> wrote:

>Have either of you installed any programs that modified the Windows XP boot
>screen (the black screen with the scrolling bar), or a program to modify the
>Windows Welcome screen (where you login)?
>
>If so, you have overwritten the ntoskrnl.exe - which is the valid Windows XP
>ntoskrnl.exe file.
>You stated ntoskrnk.exe (did you misspell?)
>
>The current ntoskrnl.exe version is: 5.1.2600.2622
>
>Under Windows XP there is no ntoskrnl.dll in c:\windows\system32
>
>
>"Ron Aaronson" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed)...
>>I have discovered that I have a 0-length
>> \windows\system32\ntoskrnl.dll file. I believe as the result of a
>> trojan horse that has been removed. My ntoskrnk.exe file seems to be
>> uncorrupted. The system seems to run ok except occasionally I will
>> get a system popup complaining that ntoskrnl.dll is not a valid
>> Windows image. I reply "ok" to this and the blocked thread seems to
>> continue normally. ntoskrnl.dll does not seem to exist on my friend's
>> Windows xp system at all, so I am tempted to remove this file
>> altogether but am afraid that I will not be able to reboot if I do.
>> Does anyoe have any recommendations?

>


 
Reply With Quote
 
NewScience
Guest
Posts: n/a
 
      4th Dec 2006
Most of the threads I recall posted problems with NTDLL.DLL having problems.
Most of the problems reported with NTOSKRNL.EXE are due to Bootup Menu being
re-written by a third party program to change the Bootup Screen or Welcome
screen.

"Ron Aaronson" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I meant to say ntoskrnl.exe, not ntoskrnk.exe (spelled correctly in
> Subject). Anyway, this file does NOT seem to have been corrupted.
>
> Your saying that ntoskrnl.dll does not exist on Windows XP explains
> why my friend's system does not have one. Could you then venture a
> guess as to why various threads will from time to time result in
> windows display a popup saying that ntoskrnl.dll is not a valid
> Windows image? Is it just because a 0-length instance of this file
> exists in the \windows\system32 directory?
>
> The real question is whether I can safely delete this file and be able
> to reboot.
>
>
> "NewScience" <(E-Mail Removed)> wrote:
>
>>Have either of you installed any programs that modified the Windows XP
>>boot
>>screen (the black screen with the scrolling bar), or a program to modify
>>the
>>Windows Welcome screen (where you login)?
>>
>>If so, you have overwritten the ntoskrnl.exe - which is the valid Windows
>>XP
>>ntoskrnl.exe file.
>>You stated ntoskrnk.exe (did you misspell?)
>>
>>The current ntoskrnl.exe version is: 5.1.2600.2622
>>
>>Under Windows XP there is no ntoskrnl.dll in c:\windows\system32
>>
>>
>>"Ron Aaronson" <(E-Mail Removed)> wrote in message
>>news:(E-Mail Removed)...
>>>I have discovered that I have a 0-length
>>> \windows\system32\ntoskrnl.dll file. I believe as the result of a
>>> trojan horse that has been removed. My ntoskrnk.exe file seems to be
>>> uncorrupted. The system seems to run ok except occasionally I will
>>> get a system popup complaining that ntoskrnl.dll is not a valid
>>> Windows image. I reply "ok" to this and the blocked thread seems to
>>> continue normally. ntoskrnl.dll does not seem to exist on my friend's
>>> Windows xp system at all, so I am tempted to remove this file
>>> altogether but am afraid that I will not be able to reboot if I do.
>>> Does anyoe have any recommendations?

>>

>



 
Reply With Quote
 
Ron Aaronson
Guest
Posts: n/a
 
      4th Dec 2006
I guess I am asking if ntoskrnl.dll is not normally on Windows XP
systems, then can I safely delete it without worrying about not being
able to reboot?

"NewScience" <(E-Mail Removed)> wrote:

>Most of the threads I recall posted problems with NTDLL.DLL having problems.
>Most of the problems reported with NTOSKRNL.EXE are due to Bootup Menu being
>re-written by a third party program to change the Bootup Screen or Welcome
>screen.
>
>"Ron Aaronson" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed)...
>>I meant to say ntoskrnl.exe, not ntoskrnk.exe (spelled correctly in
>> Subject). Anyway, this file does NOT seem to have been corrupted.
>>
>> Your saying that ntoskrnl.dll does not exist on Windows XP explains
>> why my friend's system does not have one. Could you then venture a
>> guess as to why various threads will from time to time result in
>> windows display a popup saying that ntoskrnl.dll is not a valid
>> Windows image? Is it just because a 0-length instance of this file
>> exists in the \windows\system32 directory?
>>
>> The real question is whether I can safely delete this file and be able
>> to reboot.
>>
>>
>> "NewScience" <(E-Mail Removed)> wrote:
>>
>>>Have either of you installed any programs that modified the Windows XP
>>>boot
>>>screen (the black screen with the scrolling bar), or a program to modify
>>>the
>>>Windows Welcome screen (where you login)?
>>>
>>>If so, you have overwritten the ntoskrnl.exe - which is the valid Windows
>>>XP
>>>ntoskrnl.exe file.
>>>You stated ntoskrnk.exe (did you misspell?)
>>>
>>>The current ntoskrnl.exe version is: 5.1.2600.2622
>>>
>>>Under Windows XP there is no ntoskrnl.dll in c:\windows\system32
>>>
>>>
>>>"Ron Aaronson" <(E-Mail Removed)> wrote in message
>>>news:(E-Mail Removed)...
>>>>I have discovered that I have a 0-length
>>>> \windows\system32\ntoskrnl.dll file. I believe as the result of a
>>>> trojan horse that has been removed. My ntoskrnk.exe file seems to be
>>>> uncorrupted. The system seems to run ok except occasionally I will
>>>> get a system popup complaining that ntoskrnl.dll is not a valid
>>>> Windows image. I reply "ok" to this and the blocked thread seems to
>>>> continue normally. ntoskrnl.dll does not seem to exist on my friend's
>>>> Windows xp system at all, so I am tempted to remove this file
>>>> altogether but am afraid that I will not be able to reboot if I do.
>>>> Does anyoe have any recommendations?
>>>

>>

>


 
Reply With Quote
 
NewScience
Guest
Posts: n/a
 
      4th Dec 2006
Always RENAME first, then if everything works, DELETE later.

"Ron Aaronson" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I guess I am asking if ntoskrnl.dll is not normally on Windows XP
> systems, then can I safely delete it without worrying about not being
> able to reboot?
>
> "NewScience" <(E-Mail Removed)> wrote:
>
>>Most of the threads I recall posted problems with NTDLL.DLL having
>>problems.
>>Most of the problems reported with NTOSKRNL.EXE are due to Bootup Menu
>>being
>>re-written by a third party program to change the Bootup Screen or Welcome
>>screen.
>>
>>"Ron Aaronson" <(E-Mail Removed)> wrote in message
>>news:(E-Mail Removed)...
>>>I meant to say ntoskrnl.exe, not ntoskrnk.exe (spelled correctly in
>>> Subject). Anyway, this file does NOT seem to have been corrupted.
>>>
>>> Your saying that ntoskrnl.dll does not exist on Windows XP explains
>>> why my friend's system does not have one. Could you then venture a
>>> guess as to why various threads will from time to time result in
>>> windows display a popup saying that ntoskrnl.dll is not a valid
>>> Windows image? Is it just because a 0-length instance of this file
>>> exists in the \windows\system32 directory?
>>>
>>> The real question is whether I can safely delete this file and be able
>>> to reboot.
>>>
>>>
>>> "NewScience" <(E-Mail Removed)> wrote:
>>>
>>>>Have either of you installed any programs that modified the Windows XP
>>>>boot
>>>>screen (the black screen with the scrolling bar), or a program to modify
>>>>the
>>>>Windows Welcome screen (where you login)?
>>>>
>>>>If so, you have overwritten the ntoskrnl.exe - which is the valid
>>>>Windows
>>>>XP
>>>>ntoskrnl.exe file.
>>>>You stated ntoskrnk.exe (did you misspell?)
>>>>
>>>>The current ntoskrnl.exe version is: 5.1.2600.2622
>>>>
>>>>Under Windows XP there is no ntoskrnl.dll in c:\windows\system32
>>>>
>>>>
>>>>"Ron Aaronson" <(E-Mail Removed)> wrote in message
>>>>news:(E-Mail Removed)...
>>>>>I have discovered that I have a 0-length
>>>>> \windows\system32\ntoskrnl.dll file. I believe as the result of a
>>>>> trojan horse that has been removed. My ntoskrnk.exe file seems to be
>>>>> uncorrupted. The system seems to run ok except occasionally I will
>>>>> get a system popup complaining that ntoskrnl.dll is not a valid
>>>>> Windows image. I reply "ok" to this and the blocked thread seems to
>>>>> continue normally. ntoskrnl.dll does not seem to exist on my friend's
>>>>> Windows xp system at all, so I am tempted to remove this file
>>>>> altogether but am afraid that I will not be able to reboot if I do.
>>>>> Does anyoe have any recommendations?
>>>>
>>>

>>

>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
What is ntoskrnl.exe? Grumpy Old Man Windows XP Basics 3 28th Apr 2008 06:35 PM
0-length ntoskrnl.dll (NOT ntoskrnl.exe) Ron Aaronson Windows XP Security 16 15th Dec 2006 10:03 PM
Ntoskrnl.exe deango Windows XP General 4 27th Mar 2006 12:50 AM
ntoskrnl.exe =?Utf-8?B?UGhpbGs=?= Microsoft Windows 2000 5 10th Nov 2005 05:15 PM
ntoskrnl.exe Gaga6 Windows XP General 5 17th Dec 2004 07:28 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 10:14 AM.