Jump to content

ntoskrnl.exe and ntkrnlmp.exe problem (not sure what's the problem


Recommended Posts

I have made new boot screens and tested them with boot editor but in my Unattended CD it does not work. it loads the default boot screen

I cabbed, modifyPE, and replaced them in I386 folder

I am single processor

my ntoskrnl.exe file is 2.11mb expanded (the one in the cd) and my ntkrnlmp.exe is 2.08mb

but after the install in the system32 my ntoskrnl file is 2.08mb

and i checked driver cache folder and i had my ntoskrnl.exe with 2.08 and my ntkrnlmp.exe with 2.04 (windows file protection deactivated).

I checked my cabs in the cd and there is no ntoskrnl.exe and no ntkrnlmp.exe

I don't know what the problem is... maybe you know something?

sorry for bad english

Link to comment
Share on other sites


do you know that they work, have you been able to see them actualy start up with the screen?

also ntoskrnl.exe is also stored in sp2.cab if you have winxp sp2 you need to replace that too or it will only work for the first boot

Link to comment
Share on other sites

do you know that they work, have you been able to see them actualy start up with the screen?

also ntoskrnl.exe is also stored in sp2.cab if you have winxp sp2 you need to replace that too or it will only work for the first boot

I have tested it and it worked fine

i have no sp2.cab in my xpcd but i use sp2

and it worked in first boot but no sp2.cab

EDIT: do you mean sp2.cat???

Edited by _sergio_
Link to comment
Share on other sites

Do a search for both files (although I believe only ntoskrnl.exe is needed) within the XP CD. Find where the duplicates are and replace them with the modded version. Hope this helps :D.

Link to comment
Share on other sites

Do a search for both files (although I believe only ntoskrnl.exe is needed) within the XP CD. Find where the duplicates are and replace them with the modded version. Hope this helps :D.

there is only the modded files and the ones in sp2.cat

i can't edit sp2.cat (or i don't know how) so i will try to delete this file (and sp1.cat also) and delete the entries in txtsetup.sif and dosnet.inf

OR is there any way to edit .cat files?

Link to comment
Share on other sites

CAT is a catalog file containing digital signatures. It is not a file container, so you can't add/delete/view files in it. I think what you're referring to is a CAB file, which are cabinets (similar to ZIP files) that you can store things in. Not sure how you create CAB files containing more than one file, but there's no way to just add files to an existing cabinet, so you'll have to delete it first, then create a new one with your modded files inside.

Link to comment
Share on other sites

CAT is a catalog file containing digital signatures. It is not a file container, so you can't add/delete/view files in it. I think what you're referring to is a CAB file, which are cabinets (similar to ZIP files) that you can store things in. Not sure how you create CAB files containing more than one file, but there's no way to just add files to an existing cabinet, so you'll have to delete it first, then create a new one with your modded files inside.

there are no cabs but driver.cab and fp40ext.cab. and it is a CAT file for sure. i opened that cat file with 7-zip and it as a file ntoskrnl.exe. It says the size of the original ntoskrnl.exe NOT the size of the modded file so i think that the problem is with that file. I can't edit CAT files with 7-zip and when i open with the windows default for viewing CAT files i only see a bunch of numbers and letters, not the name of the file. And if I wanted to remove some of those files I can't because there is no option to do that. So what I want is a CAT file editor. I'll google it but until now didn´t find anything. So any held would be very apreciated.

EDIT: if i remove these two cat files (SP1.CAT and SP2.CAT) you think it will work? And YES they are CAT files

Sorry for bad english

Edited by _sergio_
Link to comment
Share on other sites

#################################

I don't know what is going wrong..... I moddified my original ntoskrnl with a new look, compressed it with CABTOOL and placed it back into my i386 folder and used nlite to make iso. works great.

ntkrnlmp.exe has nothing to do with it...unless you have a multi proc system.

#############################################

Edited by irq
Link to comment
Share on other sites

  • 2 weeks later...

@ _sergio_

I integrated SP1 into my XPCD; and when SP2 released I integrated it, too.

So, I have both SP1.cab and SP2.cab (plus Driver.cab, of course!) in .\i386\

Each one of those three CABs contains four files:

1- ntoskrnl.exe

2- ntkrnlmp.exe

3- ntkrnlpa.exe

4- ntkrpamp.exe

Also, there's another instance of ntoskrnl.exe (actually: ntoskrnl.ex_) in .\i386\

I extracted each CAB. I changed the boot screen (image) in each EXE. I re-cabbed the CABs again.

I replaced the original CABs with the newly re-cabbed ones.

Also, I MakeCabbed the edited ntoskrnl.exe (to: ntoskrnl.ex_) and replaced the one in .\i386\

So, whatever KRNL is your processor, no worry.

Hope it helps.

Link to comment
Share on other sites

@ _sergio_

I integrated SP1 into my XPCD; and when SP2 released I integrated it, too.

So, I have both SP1.cab and SP2.cab (plus Driver.cab, of course!) in .\i386\

Each one of those three CABs contains four files:

1- ntoskrnl.exe

2- ntkrnlmp.exe

3- ntkrnlpa.exe

4- ntkrpamp.exe

Also, there's another instance of ntoskrnl.exe (actually: ntoskrnl.ex_) in .\i386\

I extracted each CAB. I changed the boot screen (image) in each EXE. I re-cabbed the CABs again.

I replaced the original CABs with the newly re-cabbed ones.

Also, I MakeCabbed the edited ntoskrnl.exe (to: ntoskrnl.ex_) and replaced the one in .\i386\

So, whatever KRNL is your processor, no worry.

Hope it helps.

I have replaced ALL of them.

I have no SP1.cab and there are no KRNL files in drivers.cab (maybe removed by nLite)

But I replaced the ones in SP2.cab and the ones in I386.

they work because i have decompressed them form the cd and put it in the system32 folder and htey work great.

So I really don't know what's the problem here.

maybe a super hidden? but i searchd the cd and no other NTOSKRNL.EXE or other file. Also in CAB's

It is really weird.

Maybe there is a update in SVCPACK folder that has this file???

Please help me I really don't know whats going on

Link to comment
Share on other sites

  • 4 weeks later...
  • 1 month later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...