General discussion



By tornado30 ·
When I am RESTART the computer I found that the AUTOEXEC.NT is erased from C:\WINDOWS\SYSTEM32 everytime, then I put it back again and when I restart the computer again it is erased. If someone can give me some hints on how to solve this matter I will appreciate it. Thanks.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by BFilmFan In reply to AUTOEXEC erased

Sounds like a virus. Boot, scan, clean, run.

Collapse -

by BorgInva In reply to AUTOEXEC erased

I do not have their websites on hand but check for spyware using FREE Spybot Search and Destroy 1.3 and Lavasoft's Ad-aware SE. Yes, use both.
If you have a virus program and it finds nothing, do some online scans at and whatever the site is for Microtrend's Housecall. I have another one but I have to find it.
Hopefully you can get cleaned up with these. Nothing beats more than 1 scan.
I will find those exact sites and post back shortly. I am just not at my desk at the moment. I have 1 or 2 online virus scan sites that also repair and not just scan. I just got to get them for you.

Collapse -

by ReWrite In reply to AUTOEXEC erased

If the file keeps disappearing then you either have a virus or malware on your computer. You can copy the autoexec.nt file from the c:\winnt\repair (or c:\windows\repair) back to the system32 directory and then make it readonly. This will prevent it from being deleted but you will still need to find the cause. Here are some links to the utilities you will need (they are freeware):



If you do not have an anti-virus program get a free one. I like Grisoft's AVG:

With each of these, download them, install them and update them before you run them. This should find the malicious virus or app that is deleting the autoexec.nt file.



Collapse -

by wlbowers In reply to AUTOEXEC erased

Turn off system restore if it is used in your os.

Download, update, and run the following.

Your Antivirus Software.

If you don?t have a current antivirus You can get a free copy of Computer Associates etrust EZArmor.

Spybot: Cootie Remover

Ad-Aware: Cootie Remover

Stinger: Virus Specific Remover
This item will not update through the program. You have to download the new version.

CWshredder: Trojan and Toolbar Cootie Remover
Look for the file in English CWShredder.exe


ProcInfo provides you with a quick overview of all currently running processes and displays detailed information for a lot of them.

There are programs that will provide you with information about what is running on startup or what is loaded currently.


StartUpList is information only. Startup, Registery, and others. You can?t fix anything from within the program.

Hijack This:

Hijack This
This program is useful in that it shows what is currently loading on startup. You must know what is good and what is bad. Once you check it and fix it is gone. So be sure. Items you are not sure of do a Google search for them.


Winaudit does an extensive audit of you computer. Complete list of installed software, dll, and other good stuff.


Everest (This replaced Aida32)

Everest used to be Aida32. Good system information.

Run Your Antivirus again

Download and install all OS updates.

I have had to boot into safe mode and run the removal programs.

Good Luck Lee

Related Discussions

Related Forums