ntoskrnl.exe overactive on Tablet PC now

[Guest]

Hi all,

I cleaned up an XP pro SP2 notebook, with a clean install, because
ntoskrnl.exe
was sending & receiving high volumes of packets, which seemed way over the
normal.
Now on my Tablet PC, the same is happening!

Every second the incoming meter is going into the red 4 bars up for NT
kernel & system(on Sygate personal firewall).
I'm waiting for someone at sygate forum to reply, about that.

My question is this:

Can ntoskrnl.exe get corrupted by a trojan, and be clever enough to hide
from all AV programs, and anti-spy?

I used AVG 7.1 , AVAST, ewido, spysweeper 5.0, and Etrust pest-patrol
ALL came back clean.

Is there a way I can replace that file, with the one in protected system
files, if I don't have an XP tablet PC Edtion 2005 CD(All I have is the 2 DVD
restore set, that came with it.)

I just restored this notebook with the DVD's on July 12th, which is why I'm
hoping to not have to do it again.

TIA,

Jay

 

[Guest]

All solved. Since I didn't have a Tablet CD, I made one using my XP pro SP1
CD with the i386 folder from the restore dvd. I booted & went in and put a
clean ntoskrnl.exe file back into my OS then re-installed SP2..All is well, I
wish I'd though of it for the other notebook. It does appear that a trojan
went through my OS a week ago, so it only infected the 2 PC's on at the
time..???

Any thoughts?

Regards,

J