unstable NTKRNLPA.EXE

[Guest]

I have run a RATT report. This has sited that the NTKRNLPA.EXE process is
causing my laptop to become unstable and freez when I am running audio though
my usb connection.

The support company of my audio equipment have recommended that I disbale
the process. I have learnt that it is a key Kernal componant. Can I disable
the process? or install a patch to make it stable with my dual processor?

Please help.

 

[Guest]

I have run a RATT report. This has sited that the NTKRNLPA.EXE process is
causing my laptop to become unstable and freez when I am running audio though
my usb connection.

The support company of my audio equipment have recommended that I disbale
the process. I have learnt that it is a key Kernal componant. Can I disable
the process? or install a patch to make it stable with my dual processor?

Please help.

NTKRNLPA.EXE: Is a Microsoft Windows Application.

NTKRNLPA.EXE Version: 5.1.2600.0, 5.1.2600.1106, 5.0.2195.6992
Mine is: 5.1.2600.2180 and located here in these paths:
C:\WINDOWS\system32
C:\Windows\Driver Cache\i386
C:\Windows\ServicePackFiles\i386 =
C:\Windows\Driver Cache\i386\driver.cab
C:\Windows\Driver Cache\i386\sp1.cab
C:\Windows\Driver Cache\i386\sp2.cab
C:\Windows\ServicePackFiles\i386\sp2.cab
C:\Windows\SoftwareDistribution\SelfUpdate\123444cf7557..=
C:\Windows\SoftwareDistribution\SelfUpdate\123444cf7557..\sp2.cab
You can see if you have these and if you cn't find it in one of these
locations then copy it to that location.
c:\windows\system32\ntkrnlpa.exe
Windows may not respond when you try to load a registry hive
http://support.microsoft.com/kb/836435
http://www.techspot.com/vb/all/wind...ith-Windows-Debugger-Page-Fault-50-Error.html
IRC-Worm.Fagot, VBS.Psyme, JS/Petch.A.dropper
http://www.f-secure.com/v-descs/fagot.shtml
Boot INI Options Reference
http://www.microsoft.com/technet/sysinternals/information/bootini.mspx
MS07-022: Vulnerability in the Windows kernel could allow elevation of
privilege
http://support.microsoft.com/kb/931784
HTH.
nass

 

[Guest]

Thank you kindly.

You have provided 10 locations that should have the NTKRNLPA.EXE. Am I
correct in interpretting that you say I should ensure the .exe file is in
each of the 10 locations, and if it isn't I should copy it into the location
that doesn't have it?

Please clarify.

 

[Guest]

Hi Stephenson,
Yes, but I can see only 9 not 10:
1-C:\WINDOWS\system32
2-C:\Windows\Driver Cache\i386
3-C:\Windows\ServicePackFiles\i386 =
4-C:\Windows\Driver Cache\i386\driver.cab
5-C:\Windows\Driver Cache\i386\sp1.cab
6-C:\Windows\Driver Cache\i386\sp2.cab
7-C:\Windows\ServicePackFiles\i386\sp2.cab
8-C:\Windows\SoftwareDistribution\SelfUpdate\123444cf7557..=
9-C:\Windows\SoftwareDistribution\SelfUpdate\123444cf7557..\sp2.cab

Also make sure this machine is virus free.
HTH.
Let us know.
Regards,
nass

 

[Detlev Dreyer]

I have run a RATT report. This has sited that the NTKRNLPA.EXE process is
causing my laptop to become unstable and freez when I am running audio though
my usb connection.

The support company of my audio equipment have recommended that I disbale
the process. I have learnt that it is a key Kernal componant. Can I disable
the process? or install a patch to make it stable with my dual processor?

Install these patches if not already done, updating "NTKRNLPA.EXE" as well:

1. "Computers that are running Windows XP Service Pack 2 and that are
equipped with multiple processors that support processor power management
features may experience decreased performance"
http://support.microsoft.com/kb/896256/en-us
http://www.microsoft.com/downloads/...FamilyID=c2ab5a48-8240-4934-bbd8-34fb8a0fce3b

2. "MS07-022: Vulnerability in the Windows kernel could allow elevation
of privilege" http://support.microsoft.com/kb/931784/en-us
http://www.microsoft.com/downloads/...FamilyID=eeaee4a7-4858-4b6b-9c6d-a9f1eae19b51

Scan the system for Malware in addition.

 

[Guest]

Thanks.

I have searched the machine and the .exe is only located in the
C:\WINDOWS\system32. What is the purpose of adding the file to the other 8
locations?

 

[Guest]

Because some applications will look in these locations and if they didn't
find it they will generate the error message you seen.
HTH.
Let us know your findings.
nass

 

[Pegasus [MVP]]

The post you refer to is one year old and the OP is unlikely to still hang
around. Since your question relates to Windows 7, I recommend you post it in
a Windows 7 community group, e.g. here:
http://social.answers.microsoft.com/Forums/en-US/w7repair/threads. You might
find that data recovery (if this is what you mean) is quite easy with a
Windows 7 Repair CD.

Would you mind explaining the process to back up your from a disk that
is failing to boot/restore/ etc. - WIN7? Thank you.

Been a while since this topic was up, but I just encountered this
problem myself.
Apparently it surfaced after removing an external disk without using
the "Safely remove hardware" thingy, and told me it had an I/O problem
of some sort (0xc00000e9.) I booted up with an ubuntu live cd and used
bash to search and replace all instances of the file with one from a
working vista installation. Got through the problem with ntkrnlpa.exe,
but it was just replaced with missing/corrupted ntfs.sys instead.
It wasn't in most of the folders listed here, but in a bunch of what
seemed like update folders of some sort.
Guess I'll just have to backup all my files using ubuntu and then
format and reinstall vista, as I haven't found any other solutions.

edit: of course I tried to do the same thing with ntfs.sys also
(sudo find /media/System/Windows -iname ntkrnlpa.exe -type f -exec cp
[folder with working file]/ntkrnlpa.exe {} \; if anyone needs it)