NTOSKRNL.EXE

[Guest]

after completing ms updates and rebooting my xp pro laptop, my Panda popped
up a message the the ntoskrnl.exe had changed and was trying to access the
network. I thought that ntoskrnl.exe did not access the network. I have not
answered my pop up since I am not certain if the network access is ok. Can
anyone help me out here?

Thanks for any help,

Jill

 

[Jone Doe]

Well, it's a bootup kernal, and is used to start the system.

Author: Microsoft
Part Of: Microsoft Windows Operating System

System Process: Yes
Background Process: Yes
Uses Network: No
Hardware Related: No
Common Errors: N/A
Memory Usage: N/A

According to that, it does NOT, as you stated, use the network. However,
certain viruses will change the file. Have you done a good virus check
lately?

Perhaps someone else can shed more light on the subject, I am by no means an
expert on boot processes.

 

[Guest]

Actually I have done a full virus scan with (2) AV softwares. Nothing. This
happens to be a repaired XP Pro because ..... get this, my user experienced
this same scenario with his 'new' panda product yesterday; felt that he had a
virus and replaced the NTOSKRNL.EXE with a copy from another machine after
which we could not boot to windows.

I have never used Panda and am not so sure what if anything this message
means.

Thanks for your input.

 

[Jon]

Might be related to the installation of the Window XP Hotfix (kb890859)
relating to
this article, which would replace ntoskrnl.exe

http://support.microsoft.com/kb/890859

Panda may be highlighting the fact that it has changed (?)

Better to err on the side of caution and deny it access until you are sure.

Examine the versions / properties of the file on your computer, check your
running processes eg using Task Manager, check your startup programs, do
Spyware scans............

Jon

 

[Guest]

Ok, Thanks Jon. I'll take a look at those things.