General discussion

  • Creator
    Topic
  • #2291118

    AUTOEXEC erased

    Locked

    by tornado30 ·

    When I am RESTART the computer I found that the AUTOEXEC.NT is erased from C:\WINDOWS\SYSTEM32 everytime, then I put it back again and when I restart the computer again it is erased. If someone can give me some hints on how to solve this matter I will appreciate it. Thanks.

All Comments

  • Author
    Replies
    • #3292679

      Reply To: AUTOEXEC erased

      by bfilmfan ·

      In reply to AUTOEXEC erased

      Sounds like a virus. Boot, scan, clean, run.

    • #3292473

      Reply To: AUTOEXEC erased

      by borginva ·

      In reply to AUTOEXEC erased

      I do not have their websites on hand but check for spyware using FREE Spybot Search and Destroy 1.3 and Lavasoft’s Ad-aware SE. Yes, use both.
      If you have a virus program and it finds nothing, do some online scans at http://www.symantec.com and whatever the site is for Microtrend’s Housecall. I have another one but I have to find it.
      Hopefully you can get cleaned up with these. Nothing beats more than 1 scan.
      I will find those exact sites and post back shortly. I am just not at my desk at the moment. I have 1 or 2 online virus scan sites that also repair and not just scan. I just got to get them for you.

    • #3293881

      Reply To: AUTOEXEC erased

      by rewrite ·

      In reply to AUTOEXEC erased

      If the file keeps disappearing then you either have a virus or malware on your computer. You can copy the autoexec.nt file from the c:\winnt\repair (or c:\windows\repair) back to the system32 directory and then make it readonly. This will prevent it from being deleted but you will still need to find the cause. Here are some links to the utilities you will need (they are freeware):

      AdAware: http://www.lavasoftusa.com/software/adaware/

      Spybot: http://www.safer-networking.org/en/download/index.html

      If you do not have an anti-virus program get a free one. I like Grisoft’s AVG:

      http://free.grisoft.com/freeweb.php/doc/1/

      With each of these, download them, install them and update them before you run them. This should find the malicious virus or app that is deleting the autoexec.nt file.

      Cheers.

      RW

    • #3318387

      Reply To: AUTOEXEC erased

      by wlbowers ·

      In reply to AUTOEXEC erased

      Turn off system restore if it is used in your os.

      Download, update, and run the following.

      Your Antivirus Software.

      If you don?t have a current antivirus You can get a free copy of Computer Associates etrust EZArmor.
      http://www.my-etrust.com/microsoft/

      Spybot: Cootie Remover
      http://tinyurl.com/ziar

      Ad-Aware: Cootie Remover
      http://tinyurl.com/tek5

      Stinger: Virus Specific Remover
      http://vil.nai.com/vil/stinger/
      This item will not update through the program. You have to download the new version.

      CWshredder: Trojan and Toolbar Cootie Remover
      http://tinyurl.com/2bzef
      Or
      http://tinyurl.com/2k642
      Look for the file in English CWShredder.exe

      ProcInfo:
      http://www.snapfiles.com/get/procinfo.html

      ProcInfo provides you with a quick overview of all currently running processes and displays detailed information for a lot of them.

      There are programs that will provide you with information about what is running on startup or what is loaded currently.

      StartUpList:
      http://www.mac-net.com/576482.page

      StartUpList is information only. Startup, Registery, and others. You can?t fix anything from within the program.

      Hijack This:
      http://mjc1.com/mirror/hjt/

      Hijack This
      This program is useful in that it shows what is currently loading on startup. You must know what is good and what is bad. Once you check it and fix it is gone. So be sure. Items you are not sure of do a Google search for them.

      Winaudit
      http://www.pxserver.com/WinAudit.htm

      Winaudit does an extensive audit of you computer. Complete list of installed software, dll, and other good stuff.

      Aida32
      http://www.webattack.com/get/aida32.shtml

      Everest (This replaced Aida32)
      http://www.lavalys.com/products.php?lang=en

      Everest used to be Aida32. Good system information.

      Run Your Antivirus again

      Download and install all OS updates.

      I have had to boot into safe mode and run the removal programs.

      Good Luck Lee

Viewing 3 reply threads