PDA

View Full Version : AVG & ntoskrnl.exe changed - important?


giradman
December 1st, 2007, 09:31 PM
Dell Latitude 430 - using Vista Defender + Grisoft 'free' AVG - no problems found on complete scans today; however, AVG noted that a file named 'ntoskrnl.exe' changed (and appears to have been changed back - see screen capture attached); no viruses detected - found an old thread (http://forum.grisoft.cz/freeforum/read.php?8,23153,23226) on the Grisoft Forum, which was left 'unresolved'. As a precaution, I visited Trend Mircro and ran their 'free' home scan - nothing found.

So, has anyone else using AVG on VISTA (or XP which was the OS in the thread linked above) come across this issue? If so, important or not? I guess my main concern is that if this file is being updated as a routine, is changing it a problem? Thanks - :happy:

dammit
December 1st, 2007, 09:42 PM
Hi bud..just found this.....It is normal that AVG shows that files, the MBR or Boot record to have changed. These are done during normal maintainance, when you or windows updates files or have had to correct errors on the drive. The only time that you should worry is if they also show as infected.

To get AVG to quit showing them as changed, open the AVG Test Center, click the F3 key on your keyboard and tell it to accept the changes. If it still shows something as changed after this.. delete the file named AVG7QT.DAT in C:\ and AVG will rebuild it the next time it is run.

giradman
December 1st, 2007, 11:02 PM
Divine Leader - ;) Thanks for your prompt response & reassurance - more annoying that anything, but will check out the options mentioned; BTW, that is quite an active web site! :happy:

dammit
December 1st, 2007, 11:20 PM
It will work mate from what I have found. ;)