Firstly, apologies for the multiple posting, but I wasn`t sure which
would be the most relevant group to use.

I have IE6 with Outlook Express, a USB ADSL router (using PPPoA) and
am having on-going trouble connecting to newsgroups. Unfortunately,
advice that I have received following earlier posts hasn`t resolved
the problem and my ISP hasn`t been helpful at all. However, a recent
virus scan showed that ntoskrnl.exe had "changed" and I wondered if
that might have something to do with it? As I am not sure exactly
what function this program has, apart from being essential during
boot-up, I thought it might be worth asking...

Thanks
Kate

"Kate" wrote in message
...
Firstly, apologies for the multiple posting, but I wasn`t sure which
would be the most relevant group to use.

I have IE6 with Outlook Express, a USB ADSL router (using PPPoA) and
am having on-going trouble connecting to newsgroups. Unfortunately,
advice that I have received following earlier posts hasn`t resolved
the problem and my ISP hasn`t been helpful at all. However, a recent
virus scan showed that ntoskrnl.exe had "changed" and I wondered if
that might have something to do with it? As I am not sure exactly
what function this program has, apart from being essential during
boot-up, I thought it might be worth asking...

You're apt to get most of the advice over again since you started a new
thread.

Help with malware
All MS-MVP Sites.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://www.elephantboycomputers.com/...moving_Malware
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

So How Did I Get Infected Anyway?
For quite a few people it's by installing Messenger Plus, whose ads for
malware don't identify the malware as such and try to convince you that you
owe it to the author. See also:
http://www.wilderssecurity.com/showthread.php?t=27971
Don't ever do a "default" install of anything. Always choose Custom and see
what else is being carried along. Don't install any extras you're not sure
of.

--
Frank Saunders, MS-MVP OE/WM
http://www.fjsmjs.com
Answer in newsgroup. Don't send mail.

Kate wrote on Thu, 30 Nov 2006 13:15:25 -0000:

Firstly, apologies for the multiple posting, but I wasn`t sure which
would be the most relevant group to use.

I have IE6 with Outlook Express, a USB ADSL router (using PPPoA) and
am having on-going trouble connecting to newsgroups. Unfortunately,
advice that I have received following earlier posts hasn`t resolved
the problem and my ISP hasn`t been helpful at all. However, a recent
virus scan showed that ntoskrnl.exe had "changed" and I wondered if
that might have something to do with it? As I am not sure exactly
what function this program has, apart from being essential during
boot-up, I thought it might be worth asking...

Thanks
Kate


Are you using AVG by any chance? And have you installed any MS patches
recently?

ntoskrnl.exe is the kernel image for Windows. It's a core part of the
operating system, not just a boot process. If it goes missing or gets
damaged Windows won't even run.

While it's possible that something may be attempting to infect it, it's
unlikely. It can be updated by MS patches, although the current version on
my XP Pro SP2 machine is dated 2nd March 2005, have you recently installed
Service Pack 2? Or at least since the last time you ran a virus scan?

Dan

"Daniel Crichton" wrote in message ...
Kate wrote on Thu, 30 Nov 2006 13:15:25 -0000:

Firstly, apologies for the multiple posting, but I wasn`t sure which
would be the most relevant group to use.

I have IE6 with Outlook Express, a USB ADSL router (using PPPoA) and
am having on-going trouble connecting to newsgroups. Unfortunately,
advice that I have received following earlier posts hasn`t resolved
the problem and my ISP hasn`t been helpful at all. However, a recent
virus scan showed that ntoskrnl.exe had "changed" and I wondered if
that might have something to do with it? As I am not sure exactly
what function this program has, apart from being essential during
boot-up, I thought it might be worth asking...

Thanks
Kate


Are you using AVG by any chance? And have you installed any MS patches
recently?

ntoskrnl.exe is the kernel image for Windows. It's a core part of the
operating system, not just a boot process. If it goes missing or gets
damaged Windows won't even run.

While it's possible that something may be attempting to infect it, it's
unlikely. It can be updated by MS patches, although the current version on
my XP Pro SP2 machine is dated 2nd March 2005, have you recently installed
Service Pack 2? Or at least since the last time you ran a virus scan?

Dan

Kate's trouble is OE stating that no connection to the internet exists when
opening a newsgroup, when a connection does exist. I have this trouble,
thought I'd fixed it, told her what I did, but it didn't work for either of us.

In case her situation is different from mine, here is what I've got listed:
ntoskrnl.exe 2,129 KB Application 3/1/2005 6:59 PM
version 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)

"Daniel Crichton" wrote in message
...
Kate wrote on Thu, 30 Nov 2006 13:15:25 -0000:

Firstly, apologies for the multiple posting, but I wasn`t sure
which would be the most relevant group to use.

I have IE6 with Outlook Express, a USB ADSL router (using PPPoA)
and
am having on-going trouble connecting to newsgroups. Unfortunately,
advice that I have received following earlier posts hasn`t resolved
the problem and my ISP hasn`t been helpful at all. However, a
recent
virus scan showed that ntoskrnl.exe had "changed" and I wondered if
that might have something to do with it? As I am not sure exactly
what function this program has, apart from being essential during
boot-up, I thought it might be worth asking...

Thanks
Kate


Are you using AVG by any chance? And have you installed any MS
patches recently?

ntoskrnl.exe is the kernel image for Windows. It's a core part of
the operating system, not just a boot process. If it goes missing or
gets damaged Windows won't even run.

While it's possible that something may be attempting to infect it,
it's unlikely. It can be updated by MS patches, although the current
version on my XP Pro SP2 machine is dated 2nd March 2005, have you
recently installed Service Pack 2? Or at least since the last time
you ran a virus scan?

Dan


Yes, I use AVG Free, but without email scanning enabled, as I know it
can create many problems. I have had XP2 installed for ages (not long
after it first became available, I think) and I regularly update. I
last updated on 20 November, when I accepted IE7 (which I subsequently
uninstalled), and the one before that was 16 October. The problem
with connecting to NGs began around 16 November, when I cancelled a
message on a newsserver. My version of ntoskrnl.exe is also 2 March
2005, BTW. It was a long shot that it was the cause of the connection
difficulty, but at least I can probably eliminate it now, as
everything else works fine. However, if I do need to replace it, I
have SP2 on disk.

Many thanks for the reply
Kate

Daniel Crichton schrieb am Thu, 30 Nov 2006 16:09:15 -0000:

While it's possible that something may be attempting to infect it, it's
unlikely.

Well, we don't know what virusscan revealed exactly which change and which
the exact message and path to the file was, so it could just be some
malware coming in disguise. She better asks about this in another
newsgroup talking about malware.

Kai
--
Helpsites about Windows: http://www.mvps.org
IE repair script: http://iefaq.info

"Kai Schaetzl" wrote in message
...
Daniel Crichton schrieb am Thu, 30 Nov 2006 16:09:15 -0000:

While it's possible that something may be attempting to infect it,
it's
unlikely.

Well, we don't know what virusscan revealed exactly which change and
which
the exact message and path to the file was, so it could just be some
malware coming in disguise. She better asks about this in another
newsgroup talking about malware.

Kai
--
Helpsites about Windows: http://www.mvps.org
IE repair script: http://iefaq.info


The result of the scan said only that ntoskrnl.exe had changed, but
not in what way. There was also the same result for kernel32.dll,
user32.dll, and shell32.dll, and the path to all four is
F:\WINDOWS\system32. I have carried out a malware scan with Ad-Aware
with nothing found and also run Hijackthis where the results showed
nothing that I was unable to recognise.

It is perhaps a bit drastic, but would re-installing Outlook Express
and/or IE6 be worth a try, do you think? If so, how would I go about
it, please?

Thanks
Kate

Kate schrieb am Thu, 30 Nov 2006 18:38:57 -0000:

It is perhaps a bit drastic, but would re-installing Outlook Express
and/or IE6 be worth a try, do you think? *If so, how would I go about
it, please?

No, there is nothing wrong it seems, apart from you having problems with
connecting to newsgroups. You should carry this problem to the OE6
newsgroup. They will ask you some diagnostic questions then I guess. You
don't seem to have a problem connecting now.

Kai
--
Helpsites about Windows: http://www.mvps.org
IE repair script: http://iefaq.info

"Kai Schaetzl" wrote in message
...
Kate schrieb am Thu, 30 Nov 2006 18:38:57 -0000:

It is perhaps a bit drastic, but would re-installing Outlook
Express
and/or IE6 be worth a try, do you think? If so, how would I go
about
it, please?

No, there is nothing wrong it seems, apart from you having problems
with
connecting to newsgroups. You should carry this problem to the OE6
newsgroup. They will ask you some diagnostic questions then I guess.
You
don't seem to have a problem connecting now.

Kai
--
Helpsites about Windows: http://www.mvps.org
IE repair script: http://iefaq.info


Sorry, Kai, but I tried the OE6 NG first and they cannot help any
more. There, I listed all the things I have tried - which are
numerous. Contributors to ms.p.network-web and
internetexplorer.general will also be familiar with my problem, I
fear!

Briefly, I get the message that no connection to the internet is
available, but when I click "Retry", I get connected - hence my
ability to post. It is not a major problem, I know, but inconvenient
and - as Michael Jennings will no doubt agree - most irritating, and
an indication that something is wrong that needs putting right.

Thank you again for responding.
Kate

It has not been irritating enough to get me to reinstall OE.

To reinstall OE, modify the "IsInstalled" value data to zero
and then connect to WU, according to the registry hack at
http://support.microsoft.com/default.aspx?kbid=318378

There are other things the KB says to try first, but that one
interests me, so for that reason and for your sake I'll try it
and see if I'm able to report back to this thread. If there are
any glitches or gotchas I will advise what to watch out for.

Since the absurd notice is occasional, I won't know for
sure when it departs that it won't occur. On the other hand,
if it occurs even once I will know that it is still there.

"Kate" wrote in message ...
snip
Briefly, I get the message that no connection to the internet is
available, but when I click "Retry", I get connected - hence my
ability to post. It is not a major problem, I know, but inconvenient
and - as Michael Jennings will no doubt agree - most irritating, and
an indication that something is wrong that needs putting right.

Thank you again for responding.
Kate