Ntoskrnl.exe

[Adam]

I keep on getting the following message from my firewall on a near daily
basis.
"Ntoskrnl.exe" has changed since the last time you opened it. This could
be because you have updated it recently. Do you want to allow it access to
the network?

I then did a search on my pc and found that I had one in my
windows\system32 folder and one in I386\driver.cab folder. I deleted the
latter one.

Today I got the same message ""Ntoskrnl.exe" has changed since the last time
you opened it. This could be because you have updated it recently. Do you
want to allow it access to the network?

I did another search for ntoskrnl and now I have a number of ntoskrnls on my
pc in the following folders:

Recycle bin
C:\I386
C:\I386\driver.cab
C:\I386\SP1.cab
C:\WINDOWS\system32
C:\WINDOWS\drivercache\I386\driver.cab
C:\WINDOWS\drivercache\I386\sp1.cab

I am up to date on virus definitions and I have done a virus check.

I have added some MS critical updates etc and I have been trying out
different browsers but besides that no major changes on my PC.

Any idea what is going on? And what do I need to do.

Adam

[R. C. White]

Hi, Adam.

> I then did a search on my pc and found that I had one in my
> windows\system32 folder and one in I386\driver.cab folder. I deleted the
> latter one.

You deleted the wrong one. The one in the windows\system32 folder is
actually installed and working. The I386 folder is basically a copy of what
came originally on the CD-ROM and may have been moved to the HD just in case
you need to refer to it later. In addition to the ones you listed, there
should also be a copy in windows\system32\dllcache; this one should be the
latest one from updates you've installed.

Run the System File Checker. At the Run prompt, type: sfc /scannow

SFC will compare each WinXP operating system file with the "known good" copy
held in your cache and replace any missing or damaged ones. It updates the
cache whenever it installs a Service Pack or hotfix. If your cache does not
contain the proper file, you may need to re-apply the upgrade that contained
it.

My WinXP Pro is current with all Windows Updates (as of yesterday). My
ntoskrnl.exe files in windows\system32, window\driver cache\I386, and in
windows\system32\dllcache are all 1,925,760 bytes, dated 4/24/03.

RC
--
R. C. White, CPA
San Marcos, TX

Microsoft Windows MVP

"Adam" <spurs1chelsea6ath*tm*ildotcom> wrote in message
...
> I keep on getting the following message from my firewall on a near daily
> basis.
> "Ntoskrnl.exe" has changed since the last time you opened it. This could
> be because you have updated it recently. Do you want to allow it access to
> the network?
>
> I then did a search on my pc and found that I had one in my
> windows\system32 folder and one in I386\driver.cab folder. I deleted the
> latter one.
>
> Today I got the same message ""Ntoskrnl.exe" has changed since the last
time
> you opened it. This could be because you have updated it recently. Do you
> want to allow it access to the network?
>
> I did another search for ntoskrnl and now I have a number of ntoskrnls on
my
> pc in the following folders:
>
> Recycle bin
> C:\I386
> C:\I386\driver.cab
> C:\I386\SP1.cab
> C:\WINDOWS\system32
> C:\WINDOWS\drivercache\I386\driver.cab
> C:\WINDOWS\drivercache\I386\sp1.cab
>
> I am up to date on virus definitions and I have done a virus check.
>
> I have added some MS critical updates etc and I have been trying out
> different browsers but besides that no major changes on my PC.
>
> Any idea what is going on? And what do I need to do.
>
> Adam

[Adam]

Hi RC

While running system file checker I get a message saying

Files that are required for windows to run properly must be copied to the
dll cache. Insert your Win XP Home edition cd rom.

I only have a recovery disk and when I insert it I am told that this is the
wrong disk. How do I get round this.

Adam


"R. C. White" > wrote in message
...
> Hi, Adam.
>
> > I then did a search on my pc and found that I had one in my
> > windows\system32 folder and one in I386\driver.cab folder. I deleted the
> > latter one.
>
> You deleted the wrong one. The one in the windows\system32 folder is
> actually installed and working. The I386 folder is basically a copy of
what
> came originally on the CD-ROM and may have been moved to the HD just in
case
> you need to refer to it later. In addition to the ones you listed, there
> should also be a copy in windows\system32\dllcache; this one should be the
> latest one from updates you've installed.
>
> Run the System File Checker. At the Run prompt, type: sfc /scannow
>
> SFC will compare each WinXP operating system file with the "known good"
copy
> held in your cache and replace any missing or damaged ones. It updates
the
> cache whenever it installs a Service Pack or hotfix. If your cache does
not
> contain the proper file, you may need to re-apply the upgrade that
contained
> it.
>
> My WinXP Pro is current with all Windows Updates (as of yesterday). My
> ntoskrnl.exe files in windows\system32, window\driver cache\I386, and in
> windows\system32\dllcache are all 1,925,760 bytes, dated 4/24/03.
>
> RC
> --
> R. C. White, CPA
> San Marcos, TX
>
> Microsoft Windows MVP
>
> "Adam" <spurs1chelsea6ath*tm*ildotcom> wrote in message
> ...
> > I keep on getting the following message from my firewall on a near daily
> > basis.
> > "Ntoskrnl.exe" has changed since the last time you opened it. This
could
> > be because you have updated it recently. Do you want to allow it access
to
> > the network?
> >
> > I then did a search on my pc and found that I had one in my
> > windows\system32 folder and one in I386\driver.cab folder. I deleted the
> > latter one.
> >
> > Today I got the same message ""Ntoskrnl.exe" has changed since the last
> time
> > you opened it. This could be because you have updated it recently. Do
you
> > want to allow it access to the network?
> >
> > I did another search for ntoskrnl and now I have a number of ntoskrnls
on
> my
> > pc in the following folders:
> >
> > Recycle bin
> > C:\I386
> > C:\I386\driver.cab
> > C:\I386\SP1.cab
> > C:\WINDOWS\system32
> > C:\WINDOWS\drivercache\I386\driver.cab
> > C:\WINDOWS\drivercache\I386\sp1.cab
> >
> > I am up to date on virus definitions and I have done a virus check.
> >
> > I have added some MS critical updates etc and I have been trying out
> > different browsers but besides that no major changes on my PC.
> >
> > Any idea what is going on? And what do I need to do.
> >
> > Adam
>
>

[Frank Saunders, MS-MVP]

"Adam" <spurs1chelsea6ath*tm*ildotcom> wrote in message

> Hi RC
>
> While running system file checker I get a message saying
>
> Files that are required for windows to run properly must be copied to
> the dll cache. Insert your Win XP Home edition cd rom.
>
> I only have a recovery disk and when I insert it I am told that this
> is the wrong disk. How do I get round this.
>
> Adam
>
>
> "R. C. White" > wrote in message
> ...
>> Hi, Adam.
>>
>>> I then did a search on my pc and found that I had one in my
>>> windows\system32 folder and one in I386\driver.cab folder. I
>>> deleted the latter one.
>>
>> You deleted the wrong one. The one in the windows\system32 folder is
>> actually installed and working. The I386 folder is basically a copy
>> of what came originally on the CD-ROM and may have been moved to the
>> HD just in case you need to refer to it later. In addition to the
>> ones you listed, there should also be a copy in
>> windows\system32\dllcache; this one should be the latest one from
>> updates you've installed.
>>
>> Run the System File Checker. At the Run prompt, type: sfc /scannow
>>
>> SFC will compare each WinXP operating system file with the "known
>> good" copy held in your cache and replace any missing or damaged
>> ones. It updates the cache whenever it installs a Service Pack or
>> hotfix. If your cache does not contain the proper file, you may
>> need to re-apply the upgrade that contained it.
>>
>> My WinXP Pro is current with all Windows Updates (as of yesterday).
>> My ntoskrnl.exe files in windows\system32, window\driver cache\I386,
>> and in windows\system32\dllcache are all 1,925,760 bytes, dated
>> 4/24/03.
>>
>> RC
>> --
>> R. C. White, CPA
>> San Marcos, TX
>>
>> Microsoft Windows MVP
>>
>> "Adam" <spurs1chelsea6ath*tm*ildotcom> wrote in message
>> ...
>>> I keep on getting the following message from my firewall on a near
>>> daily basis.
>>> "Ntoskrnl.exe" has changed since the last time you opened it. This
>>> could be because you have updated it recently. Do you want to allow
>>> it access to the network?
>>>
>>> I then did a search on my pc and found that I had one in my
>>> windows\system32 folder and one in I386\driver.cab folder. I
>>> deleted the latter one.
>>>
>>> Today I got the same message ""Ntoskrnl.exe" has changed since the
>>> last time you opened it. This could be because you have updated it
>>> recently. Do you want to allow it access to the network?
>>>
>>> I did another search for ntoskrnl and now I have a number of
>>> ntoskrnls on my pc in the following folders:
>>>
>>> Recycle bin
>>> C:\I386
>>> C:\I386\driver.cab
>>> C:\I386\SP1.cab
>>> C:\WINDOWS\system32
>>> C:\WINDOWS\drivercache\I386\driver.cab
>>> C:\WINDOWS\drivercache\I386\sp1.cab
>>>
>>> I am up to date on virus definitions and I have done a virus check.
>>>
>>> I have added some MS critical updates etc and I have been trying out
>>> different browsers but besides that no major changes on my PC.
>>>
>>> Any idea what is going on? And what do I need to do.
>>>
>>> Adam

Point to the I386 folder.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/