Late yesterday afternoon(Mar 13 2007) I got a WinXP update alert which I
read and installed, today during my usual afternoon Antivirus scan it tells
me that C:\Windows\System32\ntoskrnl.exe is changed.
Does anyone know if this file was changed by the WinXP update of Mar
13/2007 or have I caught something?
Trying to follow the MS web site info trail on what was updated has been an
exercise in futility for me...seems like you end up chasing yourself round
and round a maze with no end and no info on what you are trying to find
out.(G)

TIA

ICU

"ICU" <(E-Mail Removed)> wrote
> Late yesterday afternoon(Mar 13 2007) I got a WinXP update alert which I
> read and installed, today during my usual afternoon Antivirus scan it
> tells
> me that C:\Windows\System32\ntoskrnl.exe is changed.
> Does anyone know if this file was changed by the WinXP update of Mar
> 13/2007 or have I caught something?
> Trying to follow the MS web site info trail on what was updated has been
> an
> exercise in futility for me...seems like you end up chasing yourself round
> and round a maze with no end and no info on what you are trying to find
> out.(G)

What update was installed?

--
Rock [MS-MVP User/Shell]

"Rock" <(E-Mail Removed)> wrote in
news:(E-Mail Removed):

> "ICU" <(E-Mail Removed)> wrote
>> Late yesterday afternoon(Mar 13 2007) I got a WinXP update alert
>> which I read and installed, today during my usual afternoon Antivirus
>> scan it tells
>> me that C:\Windows\System32\ntoskrnl.exe is changed.
>> Does anyone know if this file was changed by the WinXP update of Mar
>> 13/2007 or have I caught something?
>> Trying to follow the MS web site info trail on what was updated has
>> been an
>> exercise in futility for me...seems like you end up chasing yourself
>> round and round a maze with no end and no info on what you are trying
>> to find out.(G)
>
> What update was installed?
>

I believe it was KB929338.
It was part of the usual second tuesday of the month uprade alert I
believe.(G)
TIA

ICU

On Wed, 14 Mar 2007 22:09:29 GMT, ICU <(E-Mail Removed)> wrote:


>I believe it was KB929338.
>It was part of the usual second tuesday of the month uprade alert I
>believe.(G)
>TIA
>
>ICU
>

According to:-

http://support.microsoft.com/?kbid=929338


It did contain "Ntoskrnl.exe" amongst others.

Cheers - Agzee

"ICU" <(E-Mail Removed)> wrote

> "Rock" <(E-Mail Removed)> wrote

>> "ICU" <(E-Mail Removed)> wrote
>>> Late yesterday afternoon(Mar 13 2007) I got a WinXP update alert
>>> which I read and installed, today during my usual afternoon Antivirus
>>> scan it tells
>>> me that C:\Windows\System32\ntoskrnl.exe is changed.
>>> Does anyone know if this file was changed by the WinXP update of Mar
>>> 13/2007 or have I caught something?
>>> Trying to follow the MS web site info trail on what was updated has
>>> been an
>>> exercise in futility for me...seems like you end up chasing yourself
>>> round and round a maze with no end and no info on what you are trying
>>> to find out.(G)
>>
>> What update was installed?
>>
>
> I believe it was KB929338.
> It was part of the usual second tuesday of the month uprade alert I
> believe.(G)

That update does replace ntoskrnl.exe. I'm not sure why you couldn't find
any info about it. Just go to the MS knowledge base, search on that KB
article and read it. It lists what files are changed.

http://support.microsoft.com/search/?adv=1

--
Rock [MS-MVP User/Shell]

"Rock" <(E-Mail Removed)> wrote in
news:(E-Mail Removed):

> "ICU" <(E-Mail Removed)> wrote
>
>> "Rock" <(E-Mail Removed)> wrote
>
>>> "ICU" <(E-Mail Removed)> wrote
>>>> Late yesterday afternoon(Mar 13 2007) I got a WinXP update alert
>>>> which I read and installed, today during my usual afternoon
>>>> Antivirus scan it tells
>>>> me that C:\Windows\System32\ntoskrnl.exe is changed.
>>>> Does anyone know if this file was changed by the WinXP update of
>>>> Mar 13/2007 or have I caught something?
>>>> Trying to follow the MS web site info trail on what was updated has
>>>> been an
>>>> exercise in futility for me...seems like you end up chasing
>>>> yourself round and round a maze with no end and no info on what you
>>>> are trying to find out.(G)
>>>
>>> What update was installed?
>>>
>>
>> I believe it was KB929338.
>> It was part of the usual second tuesday of the month uprade alert I
>> believe.(G)
>
> That update does replace ntoskrnl.exe. I'm not sure why you couldn't
> find any info about it. Just go to the MS knowledge base, search on
> that KB article and read it. It lists what files are changed.
>
> http://support.microsoft.com/search/?adv=1
>

Thanks, I see it now, what my tired old eyes saw when I first looked before
posting here was ntoskml.exe rather than ntoskrnl.exe, somehow the r & n
looked like m.(G)
What with my antivirus log posting a larger byte count for the file than
what microsoft update web page listed it at and my machine indicating a
different byte count as well, it just added to my confusion.(G)
Also on another point why in hell would MS be updating files dated 19 Dec
06 on Mar 13 07 there have been numerous other updates pushed through since
Dec 06 to date?
Just too much confusion for me I guess.

Your help is much appreciated.

ICU

Agzee <(E-Mail Removed)> wrote in
news:(E-Mail Removed):

> On Wed, 14 Mar 2007 22:09:29 GMT, ICU <(E-Mail Removed)> wrote:
>
>
>>I believe it was KB929338.
>>It was part of the usual second tuesday of the month uprade alert I
>>believe.(G)
>>TIA
>>
>>ICU
>>
>
> According to:-
>
> http://support.microsoft.com/?kbid=929338
>
>
> It did contain "Ntoskrnl.exe" amongst others.
>
> Cheers - Agzee

Thanks I see it now, when reading the web page my eyes read Ntoskml.exe
raher than Ntoskrnl.exe.
Much appreciated.

ICU

On Mar 15, 9:18 am, ICU <I...@Nowhere.com> wrote:
> Agzee <a...@nospam.somewhere> wrote innews:(E-Mail Removed):
>
>
>
> > On Wed, 14 Mar 2007 22:09:29 GMT, ICU <I...@Nowhere.com> wrote:
>
> >>I believe it was KB929338.
> >>It was part of the usual second tuesday of the month uprade alert I
> >>believe.(G)
> >>TIA
>
> >>ICU
>
> > According to:-
>
> >http://support.microsoft.com/?kbid=929338
>
> > It did contain "Ntoskrnl.exe" amongst others.
>
> > Cheers - Agzee
>
> Thanks I see it now, when reading the web page my eyes read Ntoskml.exe
> raher thanNtoskrnl.exe.
> Much appreciated.
>
> ICU

all right then: i never got an AVG antiviral scan return that this
executable file had been "changed" until i had installed the google
updater. i have uninstalled it and reinstalled it at least 5 times.
after the 4th time, i found that not only had ntoskrnl.exe CHANGED,
but that in addition, the filed called user32.dll has CHANGED. the
AVG scan never shows a virus, just that the two files were "changed,"
which i wish i knew how they were changed and why. i also wish i knew
if it is important to do anything about it.

i read a user group article in the microsoft groups about ntoskrnl,
that it relates to some change in the way the windows icon appears.
well, i decided, my windows icon looks just fine. the only thing that
is different is that it comes on far faster after the windows welcome,
login screen appears. so i figured, why mess with it? i don't think
it is causing a problem.

both of these files are in this path (and if you know anything about
why they would be changed after i installed google updater, please do
share): C:\WINDOWS\system32\[above-referenced 2 file names].

thanks, kikki