Another way to task manager please

Quote:

---

If I was going to replace the ntoskrnl.exe file, I'd make sure the replacement came from an XP machine running the same version of XP. Same service pack, too. Copy the kernel to a usb drive.

---

This is why I suggested the above method. Not necessary to put on a USB drive though, just a temporary directory: if you can't access the temporary directory to do the replacement, then you sure can't access the system32 folder to replace it! ( besides, in a lot of cases it is easier, especially for someone new to some of these bootable disks, to just copy from one folder to another then trying to mount a USB drive. )

Attached is an example of a search ( make sure you can view hidden and system files )

Jonny

Get A-Squared:

http://www.emsisoft.com/en/software/free/

Usual drill: install, update then run in safe mode I know you have run all sorts of scans but that stuff is the best IMO for diallers, and is pretty good for trojans.

I am highly suspicious about what is going on as no ntoskrnl.exe means no boot-up. I presume your scans have got rid of some rubbish and you have been messing with the startup.................

I suspect that your problem is more likely to be in the Registry or your Master Boot Record.

You might try this:

http://www.docsdownloads.com/regclean-1.htm

I am not sure about XP Home but

fdisk /mbr

Was the command to rebuild the master boot record.



:)

Jonno

Get your pink butt over to MS and get the updates you are serioulsy missing....

Logfile of HijackThis v1.99.1
Scan saved at 10:33:08, on 22/03/2006
Platform: Windows XP (WinNT 5.01.2600) (where is SP1)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)


That Q317277 is part of service pack 1, SP1

These are a list of fixes from Service Pack 1... Fix List


Luck...

Good catch Dalek....

Id green ya ...but have to spread the "love" around :)

MLF

I'd still be interested in the file info on that ntoskrnl. Any date mod and file size. That'd tell you one way or the other if the kernel's been modified.

Quote:

---

I'd still be interested in the file info on that ntoskrnl. Any date mod and file size. That'd tell you one way or the other if the kernel's been modified.

---

It wouldn't tell you if it had simply been corrupted though.

Doesnt applying the SP replace the system files....

\
That should fix the corruption...no

MLF

Morgana~ in theory that sounds fine, but I am still intrigued that he can actually boot it and get on the internet with the error that is being reported.

The service pack won't repair the Registry unless by coincidence or pure chance?

It is a strange one as far as I am concerned................it shouldn't boot?

:)

I have seen this error with a harddrive starting to go.....and the file is sitting in a damaged area......so Mr Frond may what to run a chdsk

MLF

I still have no idea how he is booting this box if ntoskrnl is missing or damaged... unless it's intermittently... and I'd be counting the seconds till the drive fails altogether...