Autoexec.nt disappears, windupdate not present

[jbyoung]

System is XP Home SP1, same at SP2.
Autoexec.nt disappears on every reboot so disables 16 bit software. There
is no sign of windupdate.exe by searching the system drive or the registry.
AdAware, Spybot, PestPatrol do not find this problem. Temporary fix of
symptom by making autoexec.nt read-only.
Possibly name of windupdate.exe has been changed to prevent detection? Has
anyone info on this?

 

[Guest]

I have the same problem. There must be something hiding that is rebugging.
Whenever I run my ad-aware after I fix the autoexec.nt by copying
windows/repair/autoexec.nt to my system32 folder (a fix I found here last
night) and everything is fine and the windupdate files are deleted by
ad-aware, when I reboot the same viruses are back and I have to start all
over again. I've run several debuggers, and I found somewhere a link to a
patch by microsoft, but my browser's security was too tight to download it.
Now I can't remember where it was so I'll continue looking. If I find out
I'll come back and post it.

I'm running XP professional

If anyone else knows the answer it would help, by the way, all those
postings about the games not working are caused by the same problem. If
you're running any old 16 bit games that aren't working right, it's due to
the autoexec.nt problems.

Thx Wendianne

 

[Patti MacLeod]

Hi Wendianne,

As a "workaround" for the continued deletion of autoexec.nt from your
C:\Windows\System32 folder, so you don't have to keep copying it from the
repair folder time after time, change its attributes to Read Only, and it
should not be deleted upon restart.

I'm afraid that I don't know what or where the patch is that you referenced,
but have you tried Spybot Search and destroy and Cool Web Shredder to try to
get rid of those nasties that keep reappearing?

Spybot:
http://www.safer-networking.org/en/mirrors/index.html

D/load the standalone version of CWShredder from here:
http://www.intermute.com/spysubtract/cwshredder_download.html



Regards,