Ntkrnlpa.exe and tcpipreg.sys BSODS

Try running Malwarebytes

Malwarebytes

Download Link MalwareBytes

When the installation is done uncheck Enable free trial of Malwarebytes (see image below )



Update the definitions and do a full scan

On the Scanner tab:
Make sure the "Perform Full Scan" option is selected.
Then click on the Scan button.
If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
Make sure that everything is checked, and click Remove Selected.
When removal is completed, a log report will open in Notepad.
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply and exit MBAM.

rudy108 said:

Thank you, Bluerobot. So I tried a whole bunch of stuff.

I tried repair from the partition, though I'm not sure I have that option. I did "Startup Repair," but that didn't work. Ran scannow, but still bad.

I looked into the ISO thing. But since Windows came pre-installed, I'm not sure I can get an ISO.

I also found a site with all the windows files, DLL EXE Free download, and downloaded fresh copies of the 2 corrupt files. I took ownership of the corrupt files, renamed them to "old," and then copied the new files in. Then ran scannow, but it still showed them as corrupt. (Or do I have to use "takedown" command perhaps?)

I also tried some software from tweaking.com, All In One Windows Repair, but that didn't work either.

rudy108 said:

Okay. So I ran Malwarebytes, and it looks clean. I attached the log file.

With the repair install, I downloaded the Windows 7 ISO from the link the how-to guide gave. Not sure if I should be doing some other, newer link perhaps. Anyways, it took a while, and suddenly had a problem 2 minutes before completion - something about not being able to read the source file.

But it was showing in Downloads, and I thought I might as well try it. So I downloaded that eicfg_remover.exe tool, and ran it. It wouldn't work though, saying I didn't have write access, or the file was corrupted, or some other program had it locked. I do appear to have write access. I checked that.

Those dll sites are usually overrun with Trojans, rootkits, viruses, etc. The eicfg tool won't help, it's for creating Universal install media. Ask before you try something, these people are trying to help you.

Why is it significant the iso was in downloads? A bootable flash drive or DVD is to be made with it according to the linked tutorial.