Pages

Subscribe:

Sep 16, 2008

what is boot.ini ,NTDETECT.com and NTLDR

http://karthik3685.files.wordpress.com/2007/12/windows_xp_logo-thumb.jpg
Maybe you've seen this files several times on your drive C: , and you don't know what is it or whats the purpose of these files. Sometimes, you think that its a virus and starts scanning it with your most powerful antivirus but nothing happened. Here are some info about these files so you won't be confused the next time you see it.

Boot.ini

The "boot.ini" is a Microsoft initialization file found on the Microsoft Windows NT, Microsoft Windows 2000, and Microsoft Windows XP operating systems. This file is always located on the root directory of the primary hard disk drive. In other words, it is located at "C:\" directory or the "C Drive". This file is used by Microsoft Windows as a method of displaying a menu of operating systems currently on the computer and allowing the user to easily select which operating system to load. In addition, this file is also used to point to the locations of each of the operating systems.

NTDETECT.com

Ntdetect.com is invoked by NTLDR, and returns the information it gathers to NTLDR when finished, so that it can then be passed on to Ntoskrnl.exe, the Windows kernel.

Ntdetect.com is used on computers that use BIOS firmware. Computers with Extensible Firmware Interface, such as IA-64, use a method of device-detection that is not tied to the operating system.
In addition, Ntdetect.com will make a determination as to which hardware profile to use. Windows supports multiple distinct hardware profiles, which allows a single copy of Windows to work well in situations where the hardware changes between specific layouts on a regular basis. This is common with portable computers that connect to a docking station.

NTLDR

NTLDR allows the user to choose which operating system to boot from at the menu; for NT and NT-based operating systems, it also allows the user to pass preconfigured options to the kernel. The menu options are stored in boot.ini, which itself is located in the root of the same disk as NTLDR.

Now that you have known these files and know also their purpose on your operating system, you will now realize that it is not a virus...=)

1 Comments:

Anonymous said...

Thank you for your explanation ..