Join or sign in Register for your free TechRepublic membership or if you are already a member, sign in using your preferred method below. Use Your Email Use FacebookUse Linkedin

AUTOEXEC erased

Locked

When I am RESTART the computer I found that the AUTOEXEC.NT is erased from C:\WINDOWS\SYSTEM32 everytime, then I put it back again and when I restart the computer again it is erased. If someone can give me some hints on how to solve this matter I will appreciate it. Thanks.

Topic

Reply To: AUTOEXEC erased

In reply to AUTOEXEC erased

Sounds like a virus. Boot, scan, clean, run.

Reply To: AUTOEXEC erased

In reply to AUTOEXEC erased

I do not have their websites on hand but check for spyware using FREE Spybot Search and Destroy 1.3 and Lavasoft’s Ad-aware SE. Yes, use both.
If you have a virus program and it finds nothing, do some online scans at http://www.symantec.com and whatever the site is for Microtrend’s Housecall. I have another one but I have to find it.
Hopefully you can get cleaned up with these. Nothing beats more than 1 scan.
I will find those exact sites and post back shortly. I am just not at my desk at the moment. I have 1 or 2 online virus scan sites that also repair and not just scan. I just got to get them for you.

Reply To: AUTOEXEC erased

In reply to AUTOEXEC erased

If the file keeps disappearing then you either have a virus or malware on your computer. You can copy the autoexec.nt file from the c:\winnt\repair (or c:\windows\repair) back to the system32 directory and then make it readonly. This will prevent it from being deleted but you will still need to find the cause. Here are some links to the utilities you will need (they are freeware):

AdAware: http://www.lavasoftusa.com/software/adaware/

Spybot: http://www.safer-networking.org/en/download/index.html

If you do not have an anti-virus program get a free one. I like Grisoft’s AVG:

http://free.grisoft.com/freeweb.php/doc/1/

With each of these, download them, install them and update them before you run them. This should find the malicious virus or app that is deleting the autoexec.nt file.

Cheers.

RW

Reply To: AUTOEXEC erased

In reply to AUTOEXEC erased

Turn off system restore if it is used in your os.

Download, update, and run the following.

Your Antivirus Software.

If you don?t have a current antivirus You can get a free copy of Computer Associates etrust EZArmor.
http://www.my-etrust.com/microsoft/

Spybot: Cootie Remover
http://tinyurl.com/ziar

Ad-Aware: Cootie Remover
http://tinyurl.com/tek5

Stinger: Virus Specific Remover
http://vil.nai.com/vil/stinger/
This item will not update through the program. You have to download the new version.

CWshredder: Trojan and Toolbar Cootie Remover
http://tinyurl.com/2bzef
Or
http://tinyurl.com/2k642
Look for the file in English CWShredder.exe

ProcInfo:
http://www.snapfiles.com/get/procinfo.html

ProcInfo provides you with a quick overview of all currently running processes and displays detailed information for a lot of them.

There are programs that will provide you with information about what is running on startup or what is loaded currently.

StartUpList:
http://www.mac-net.com/576482.page

StartUpList is information only. Startup, Registery, and others. You can?t fix anything from within the program.

Hijack This:
http://mjc1.com/mirror/hjt/

Hijack This
This program is useful in that it shows what is currently loading on startup. You must know what is good and what is bad. Once you check it and fix it is gone. So be sure. Items you are not sure of do a Google search for them.

Winaudit
http://www.pxserver.com/WinAudit.htm

Winaudit does an extensive audit of you computer. Complete list of installed software, dll, and other good stuff.

Aida32
http://www.webattack.com/get/aida32.shtml

Everest (This replaced Aida32)
http://www.lavalys.com/products.php?lang=en

Everest used to be Aida32. Good system information.

Run Your Antivirus again

Download and install all OS updates.

I have had to boot into safe mode and run the removal programs.

Good Luck Lee

[Author]

Replies