Truncated ntsokrnl.dll

  • Thread starter Thread starter Ron Aaronson
  • Start date Start date
R

Ron Aaronson

I have discovered that my \windows\system32\ntoskrnl.dll file has been
truncated to 0 bytes (as the result of a virus?). This results in
popups being displayed from time to time saying that this file is an
invalid Windows image. The Windows XP Pro installation disk seems to
have a i386\ntoskrnl.ex_ file but no i386\ntoskrnl.dl_ file. Can
anyone shed light on this problem, tell me what the future impact
might be, and tell me how to recover an accepatle version of this
file? HELP!
 
It could be malware related and you should scan for such being sure to use
the latest definitions for whatever you scan with. You can try running
System File Checker as in sfc /scannow to check for proper versions of
system files and replace those that are not. The link below explains more
and it may prompt you to insert the install disk.

Steve

http://support.microsoft.com/?kbid=310747
 
I ran the System File Checker and it completed with no messages and
with ntoskrnl.dll unmodified. Interestingly, I tried running the
System Restore utility using various checkpoint dates and they all
failed. It looks like my checkpoints may have been clobbered. At
this point I wouldn't mind trying to replace my truncated ntoskrnl.dll
with (any )one from a Windows XP Pro system (no viruses please!).
 
Back
Top