Last week the boot.ini file disappeared from my c:\ drive and the boot.ini
tab disappeared from msconfig. I can recreate the file using notepad or by
going to the control panel (system - advanced - start up and recovery -
edit) and paste the boot.ini text there. (I have made the files
"unhidden").

Whenever I restart or shut down the computer then turn it back on the
boot.ini file has been deleted again and the boot.ini tab from msconfig is no
longer present.

The message I get on startup is "Invalid boot.ini file. Booting from
C:\windows".

I believe this is looking at the c:\windows\pss directory for the backup
boot file. After this message disappears from the start-up procedure it
seem to boot normally.

I am looking for help on finding why the boot.ini file is being deleted and
a solution to keep it in place.

The boot.ini file on C:\ is ----

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
Professional" /noexecute=optin /fastdetect /PAE


* The PC is a HP XW8200 quad core 2.
* No windows XP Pro install disk was received with the machine.

Thank you,

saltcity wrote:
> Last week the boot.ini file disappeared from my c:\ drive and the boot.ini
> tab disappeared from msconfig. I can recreate the file using notepad or by
> going to the control panel (system - advanced - start up and recovery -
> edit) and paste the boot.ini text there. (I have made the files
> "unhidden").
>
> Whenever I restart or shut down the computer then turn it back on the
> boot.ini file has been deleted again and the boot.ini tab from msconfig is no
> longer present.
>
> The message I get on startup is "Invalid boot.ini file. Booting from
> C:\Windows".
>
> I believe this is looking at the C:\Windows\Pss directory for the backup
> boot file. After this message disappears from the start-up procedure it
> seems to boot normally.
>
> I am looking for help on finding why the boot.ini file is being deleted and
> a solution to keep it in place.
>
> The boot.ini file on C:\ is ----
>
> [boot loader]
> timeout=30
> default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
> [operating systems]
> multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
> Professional" /noexecute=optin /fastdetect /PAE
>
>
> * The PC is a HP XW8200 quad core 2.
> * No Windows XP Pro install disk was received with the machine.
>
> Thank you,

Try making the file Read Only. That might prevent it from being
deleted.. Also limit the amount of files in the root folder, C:\

That MIGHT prevent its (boot.ini) demise.

--
Joe =o)

On May 28, 9:10*am, saltcity <saltc...@discussions.microsoft.com>
wrote:
> Last week the boot.ini file disappeared from my c:\ drive and the boot.ini
> tab disappeared from msconfig. *I can recreate the file using notepad or by
> going to the control panel *(system - advanced - start up and recovery *-
> edit) and paste the boot.ini text *there. * * *(I have made the files
> "unhidden").
>
> Whenever I restart *or shut down the computer then turn it back on the
> boot.ini file has been deleted again and the boot.ini tab from msconfig is no
> longer present. * *
>
> The message I get on startup is "Invalid boot.ini file. * Booting from
> C:\windows".
>
> I believe this *is looking at the c:\windows\pss directory for the backup
> boot file. *After *this message disappears from the start-up procedure it
> seem to boot *normally. *
>
> I am looking for help on finding why the boot.ini file is being deleted and
> a solution to keep it in place.
>
> The boot.ini file on C:\ is ----
>
> [boot loader]
> timeout=30
> default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
> [operating systems]
> multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
> Professional" /noexecute=optin /fastdetect /PAE
>
> * The PC is a HP XW8200 quad core 2. *
> * No windows XP Pro install disk was received with the machine.
>
> Thank you,

Yes - it is not disappearing, it is being deleted.

You need to fix what is deleting it, not try to change the file
attributes so it is impossible to delete (which may not work anyway).
Whatever mechanism that is deleting it will still be there. Fix the
problem, not a symptom of the problem.

Sounds like a cute malware trick, so I would first try to eliminate
that possibility:

Download, install, update and do a full scan with these three free
malware detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
AVG (AVG): http://free.avg.com/

Jose

"Elmo" wrote:

> saltcity wrote:
> > Last week the boot.ini file disappeared from my c:\ drive and the boot.ini
> > tab disappeared from msconfig. I can recreate the file using notepad or by
> > going to the control panel (system - advanced - start up and recovery -
> > edit) and paste the boot.ini text there. (I have made the files
> > "unhidden").
> >
> > Whenever I restart or shut down the computer then turn it back on the
> > boot.ini file has been deleted again and the boot.ini tab from msconfig is no
> > longer present.
> >
> > The message I get on startup is "Invalid boot.ini file. Booting from
> > C:\Windows".
> >
> > I believe this is looking at the C:\Windows\Pss directory for the backup
> > boot file. After this message disappears from the start-up procedure it
> > seems to boot normally.
> >
> > I am looking for help on finding why the boot.ini file is being deleted and
> > a solution to keep it in place.
> >
> > The boot.ini file on C:\ is ----
> >
> > [boot loader]
> > timeout=30
> > default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
> > [operating systems]
> > multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
> > Professional" /noexecute=optin /fastdetect /PAE
> >
> >
> > * The PC is a HP XW8200 quad core 2.
> > * No Windows XP Pro install disk was received with the machine.
> >
> > Thank you,
>
> Try making the file Read Only. That might prevent it from being
> deleted.. Also limit the amount of files in the root folder, C:\
>
> That MIGHT prevent its (boot.ini) demise.
>
> --
> Joe =o)
>

Hi Joe,

Verified that the boot.ini was read only and hidden. Same situation as
before, it disappeared.......on restart......

I have 11 files in the root directory of c:\ plus 17 folders. 43.8 gb
free out of 70 gb on this drive. 2 other drives on this machine.

saltcity wrote:
> "Elmo" wrote:
>
>> saltcity wrote:
>>> Last week the boot.ini file disappeared from my c:\ drive and the
>>> boot.ini tab disappeared from msconfig. I can recreate the file
>>> using notepad or by going to the control panel (system - advanced
>>> - start up and recovery - edit) and paste the boot.ini text
>>> there. (I have made the files "unhidden").
>>>
>>> Whenever I restart or shut down the computer then turn it back on
>>> the boot.ini file has been deleted again and the boot.ini tab from
>>> msconfig is no longer present.
>>>
>>> The message I get on startup is "Invalid boot.ini file. Booting
>>> from C:\Windows".
>>>
>>> I believe this is looking at the C:\Windows\Pss directory for the
>>> backup boot file. After this message disappears from the start-up
>>> procedure it seems to boot normally.
>>>
>>> I am looking for help on finding why the boot.ini file is being
>>> deleted and a solution to keep it in place.
>>>
>>> The boot.ini file on C:\ is ----
>>>
>>> [boot loader]
>>> timeout=30
>>> default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
>>> [operating systems]
>>> multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
>>> Professional" /noexecute=optin /fastdetect /PAE
>>>
>>>
>>> * The PC is a HP XW8200 quad core 2.
>>> * No Windows XP Pro install disk was received with the machine.
>>>
>>> Thank you,
>>
>> Try making the file Read Only. That might prevent it from being
>> deleted.. Also limit the amount of files in the root folder, C:\
>>
>> That MIGHT prevent its (boot.ini) demise.
>>
>> --
>> Joe =o)
>>
>
> Hi Joe,
>
> Verified that the boot.ini was read only and hidden. Same situation
> as before, it disappeared.......on restart......
>
> I have 11 files in the root directory of c:\ plus 17 folders.
> 43.8 gb free out of 70 gb on this drive. 2 other drives on this
> machine.

It isn't the number of files of folders in the root causing your
problem; you can forget about that. IT's either malware or file
corruption. Truthfully, sounds like malware to me. Update your AV and
spyware detectors and do full scans of your system.
Meanwhile, create a "spare" boot.ini you can copy over for when you
need it.

Run them from Safe Mode for the ones that will run that way. Some may
not.
If that doesn't work other measures may be needed.

Let us know what AV and spyware detection software you used too, please.

HTH,

Twayne`

Jose wrote:
> On May 28, 9:10 am, saltcity <saltc...@discussions.microsoft.com>
> wrote:
>> Last week the boot.ini file disappeared from my c:\ drive and the
>> boot.ini tab disappeared from msconfig. I can recreate the file
>> using notepad or by going to the control panel (system - advanced -
>> start up and recovery - edit) and paste the boot.ini text there. (I
>> have made the files "unhidden").
>>
>> Whenever I restart or shut down the computer then turn it back on the
>> boot.ini file has been deleted again and the boot.ini tab from
>> msconfig is no longer present.
>>
>> The message I get on startup is "Invalid boot.ini file. Booting from
>> C:\windows".
>>
>> I believe this is looking at the c:\windows\pss directory for the
>> backup boot file. After this message disappears from the start-up
>> procedure it
>> seem to boot normally.
>>
>> I am looking for help on finding why the boot.ini file is being
>> deleted and a solution to keep it in place.
>>
>> The boot.ini file on C:\ is ----
>>
>> [boot loader]
>> timeout=30
>> default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
>> [operating systems]
>> multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
>> Professional" /noexecute=optin /fastdetect /PAE
>>
>> * The PC is a HP XW8200 quad core 2.
>> * No windows XP Pro install disk was received with the machine.
>>
>> Thank you,
>
> Yes - it is not disappearing, it is being deleted.
>
> You need to fix what is deleting it, not try to change the file
> attributes so it is impossible to delete (which may not work anyway).
> Whatever mechanism that is deleting it will still be there. Fix the
> problem, not a symptom of the problem.
>
> Sounds like a cute malware trick, so I would first try to eliminate
> that possibility:
>
> Download, install, update and do a full scan with these three free
> malware detection programs:
>
> Malwarebytes (MBAM): http://malwarebytes.org/
> SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
> AVG (AVG): http://free.avg.com/
>
> Jose

Since this is happening around the boot process, it's best to try them
to see if they will run from Safe Mode first, then regular if not.

Hi,
It seems to me that what 'Twayne' says in his post about it being the
result of malware, is your best bet.
However, there are also a couple of things you can do to stop this
problem.

1). Copy your c:\windows\pss\boot.ini.backup file to the ROOT of your C:
drive.

2). reset the permissions on the c:\boot.ini file to stop the file from
being deleted.
Do this by choosing properties on the file and going to the 'Security' tab.
Press on the 'Advanced' button and clear the check-box marked 'Inherit from
parent the permission entries.....' then click on 'Copy' on the box that
pops up.
Click on the 'Edit' button for every entry in the list and uncheck the
'Delete' and 'Change Permissions' boxes.
Press [ok] and [ok] to close both dialogues.

This should prevent ANY application (or virus) from deleting the file.

Also, further protect the file by typing the following:


attrib +r +h +s c:\boot.ini


....in a 'Command Prompt' window.


==



Cheers, Tim Meddick, Peckham, London. :-)


"saltcity" <(E-Mail Removed)> wrote in message
news:49581BA6-D388-4298-BD8E-(E-Mail Removed)...
> Last week the boot.ini file disappeared from my c:\ drive and the boot.ini
> tab disappeared from msconfig. I can recreate the file using notepad or
> by
> going to the control panel (system - advanced - start up and recovery -
> edit) and paste the boot.ini text there. (I have made the files
> "unhidden").
>
> Whenever I restart or shut down the computer then turn it back on the
> boot.ini file has been deleted again and the boot.ini tab from msconfig is
> no
> longer present.
>
> The message I get on startup is "Invalid boot.ini file. Booting from
> C:\windows".
>
> I believe this is looking at the c:\windows\pss directory for the backup
> boot file. After this message disappears from the start-up procedure it
> seem to boot normally.
>
> I am looking for help on finding why the boot.ini file is being deleted
> and
> a solution to keep it in place.
>
> The boot.ini file on C:\ is ----
>
> [boot loader]
> timeout=30
> default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
> [operating systems]
> multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
> Professional" /noexecute=optin /fastdetect /PAE
>
>
> * The PC is a HP XW8200 quad core 2.
> * No windows XP Pro install disk was received with the machine.
>
> Thank you,

"Jose" wrote:

> On May 28, 9:10 am, saltcity <saltc...@discussions.microsoft.com>
> wrote:
> > Last week the boot.ini file disappeared from my c:\ drive and the boot.ini
> > tab disappeared from msconfig. I can recreate the file using notepad or by
> > going to the control panel (system - advanced - start up and recovery -
> > edit) and paste the boot.ini text there. (I have made the files
> > "unhidden").
> >
> > Whenever I restart or shut down the computer then turn it back on the
> > boot.ini file has been deleted again and the boot.ini tab from msconfig is no
> > longer present.
> >
> > The message I get on startup is "Invalid boot.ini file. Booting from
> > C:\windows".
> >
> > I believe this is looking at the c:\windows\pss directory for the backup
> > boot file. After this message disappears from the start-up procedure it
> > seem to boot normally.
> >
> > I am looking for help on finding why the boot.ini file is being deleted and
> > a solution to keep it in place.
> >
> > The boot.ini file on C:\ is ----
> >
> > [boot loader]
> > timeout=30
> > default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
> > [operating systems]
> > multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
> > Professional" /noexecute=optin /fastdetect /PAE
> >
> > * The PC is a HP XW8200 quad core 2.
> > * No windows XP Pro install disk was received with the machine.
> >
> > Thank you,
>
> Yes - it is not disappearing, it is being deleted.
>
> You need to fix what is deleting it, not try to change the file
> attributes so it is impossible to delete (which may not work anyway).
> Whatever mechanism that is deleting it will still be there. Fix the
> problem, not a symptom of the problem.
>
> Sounds like a cute malware trick, so I would first try to eliminate
> that possibility:
>
> Download, install, update and do a full scan with these three free
> malware detection programs:
>
> Malwarebytes (MBAM): http://malwarebytes.org/
> SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
> AVG (AVG): http://free.avg.com/
>
> Jose
>

Scans in process - found one infected file with Anti-Malware
- found one adware with SuperAntiVirus

Will let you know results on completion of scans in safe mode. So far the
boot.ini file is still being deleted. I am checking after each scan.

Jon

"Twayne" wrote:

> saltcity wrote:
> > "Elmo" wrote:
> >
> >> saltcity wrote:
> >>> Last week the boot.ini file disappeared from my c:\ drive and the
> >>> boot.ini tab disappeared from msconfig. I can recreate the file
> >>> using notepad or by going to the control panel (system - advanced
> >>> - start up and recovery - edit) and paste the boot.ini text
> >>> there. (I have made the files "unhidden").
> >>>
> >>> Whenever I restart or shut down the computer then turn it back on
> >>> the boot.ini file has been deleted again and the boot.ini tab from
> >>> msconfig is no longer present.
> >>>
> >>> The message I get on startup is "Invalid boot.ini file. Booting
> >>> from C:\Windows".
> >>>
> >>> I believe this is looking at the C:\Windows\Pss directory for the
> >>> backup boot file. After this message disappears from the start-up
> >>> procedure it seems to boot normally.
> >>>
> >>> I am looking for help on finding why the boot.ini file is being
> >>> deleted and a solution to keep it in place.
> >>>
> >>> The boot.ini file on C:\ is ----
> >>>
> >>> [boot loader]
> >>> timeout=30
> >>> default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
> >>> [operating systems]
> >>> multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
> >>> Professional" /noexecute=optin /fastdetect /PAE
> >>>
> >>>
> >>> * The PC is a HP XW8200 quad core 2.
> >>> * No Windows XP Pro install disk was received with the machine.
> >>>
> >>> Thank you,
> >>
> >> Try making the file Read Only. That might prevent it from being
> >> deleted.. Also limit the amount of files in the root folder, C:\
> >>
> >> That MIGHT prevent its (boot.ini) demise.
> >>
> >> --
> >> Joe =o)
> >>
> >
> > Hi Joe,
> >
> > Verified that the boot.ini was read only and hidden. Same situation
> > as before, it disappeared.......on restart......
> >
> > I have 11 files in the root directory of c:\ plus 17 folders.
> > 43.8 gb free out of 70 gb on this drive. 2 other drives on this
> > machine.
>
> It isn't the number of files of folders in the root causing your
> problem; you can forget about that. IT's either malware or file
> corruption. Truthfully, sounds like malware to me. Update your AV and
> spyware detectors and do full scans of your system.
> Meanwhile, create a "spare" boot.ini you can copy over for when you
> need it.
>
> Run them from Safe Mode for the ones that will run that way. Some may
> not.
> If that doesn't work other measures may be needed.
>
> Let us know what AV and spyware detection software you used too, please.
>
> HTH,
>
> Twayne`
>
>
>

Using Malwarebytes - Anti-Malware, SuperAntivirus and AVG Antivirus
I had run SuperAnvirus and AVG yesterday but not in 'safe mode'.

Running all in 'save mode' this afternoon.




>

"saltcity" wrote:

>
>
> "Twayne" wrote:
>
> > saltcity wrote:
> > > "Elmo" wrote:
> > >
> > >> saltcity wrote:
> > >>> Last week the boot.ini file disappeared from my c:\ drive and the
> > >>> boot.ini tab disappeared from msconfig. I can recreate the file
> > >>> using notepad or by going to the control panel (system - advanced
> > >>> - start up and recovery - edit) and paste the boot.ini text
> > >>> there. (I have made the files "unhidden").
> > >>>
> > >>> Whenever I restart or shut down the computer then turn it back on
> > >>> the boot.ini file has been deleted again and the boot.ini tab from
> > >>> msconfig is no longer present.
> > >>>
> > >>> The message I get on startup is "Invalid boot.ini file. Booting
> > >>> from C:\Windows".
> > >>>
> > >>> I believe this is looking at the C:\Windows\Pss directory for the
> > >>> backup boot file. After this message disappears from the start-up
> > >>> procedure it seems to boot normally.
> > >>>
> > >>> I am looking for help on finding why the boot.ini file is being
> > >>> deleted and a solution to keep it in place.
> > >>>
> > >>> The boot.ini file on C:\ is ----
> > >>>
> > >>> [boot loader]
> > >>> timeout=30
> > >>> default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
> > >>> [operating systems]
> > >>> multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
> > >>> Professional" /noexecute=optin /fastdetect /PAE
> > >>>
> > >>>
> > >>> * The PC is a HP XW8200 quad core 2.
> > >>> * No Windows XP Pro install disk was received with the machine.
> > >>>
> > >>> Thank you,
> > >>
> > >> Try making the file Read Only. That might prevent it from being
> > >> deleted.. Also limit the amount of files in the root folder, C:\
> > >>
> > >> That MIGHT prevent its (boot.ini) demise.
> > >>
> > >> --
> > >> Joe =o)
> > >>
> > >
> > > Hi Joe,
> > >
> > > Verified that the boot.ini was read only and hidden. Same situation
> > > as before, it disappeared.......on restart......
> > >
> > > I have 11 files in the root directory of c:\ plus 17 folders.
> > > 43.8 gb free out of 70 gb on this drive. 2 other drives on this
> > > machine.
> >
> > It isn't the number of files of folders in the root causing your
> > problem; you can forget about that. IT's either malware or file
> > corruption. Truthfully, sounds like malware to me. Update your AV and
> > spyware detectors and do full scans of your system.
> > Meanwhile, create a "spare" boot.ini you can copy over for when you
> > need it.
> >
> > Run them from Safe Mode for the ones that will run that way. Some may
> > not.
> > If that doesn't work other measures may be needed.
> >
> > Let us know what AV and spyware detection software you used too, please.
> >
> > HTH,
> >
> > Twayne`
> >
> >
> >
>
> Using Malwarebytes - Anti-Malware, SuperAntiSpyware and AVG Antivirus
> I had run SuperAnvirus and AVG yesterday but not in 'safe mode'.
>
> Running all in 'save mode' this afternoon.
>
>
>

> >