AUTOEXEC.NT - FIX

[TexE2u]

Colin got it right!!!

Hi there Michelle, try logging on to the site below, and
downloading XP_Fix.EXE It took me literaly hours to
sort this problem out, and was cured in seconds after I
had found out what to do!!!

Colin

http://www.visualtour.com/downloads/default.asp

 

[Guest]

hey, this was really helpful. It solved a big problem for me. Thanks!

 

[Guest]

I also had the same problem. I downloaded the xp fix, and it fixed my
problem, but everytime I restart my computer, the problem is back, the
autoexec.nt file is missing aagain. I have to do the fix again. What could
be deleteing this file every time I restart? Help?

 

[Malke]

I also had the same problem. I downloaded the xp fix, and it fixed my
problem, but everytime I restart my computer, the problem is back, the
autoexec.nt file is missing aagain. I have to do the fix again. What
could
be deleteing this file every time I restart? Help?

This would indicate that the root problem is still there. Since a trojan
can cause this problem, do a scan in Safe Mode with a current version
(not earlier than 2003) antivirus using updated definitions.

This can also be caused by the malware Winad. Uninstall Winad from
Add/Remove Programs and run all normal spyware removal tools in Safe
Mode. Also, AVAST (antivirus software) can be the cause if you have
WinXP SP2 installed:
http://groups.google.com/[email protected]

Post back if you need more information on removing malware.

Malke

 

[Jim Byrd]

Hi Marshur - A program called windupdate.exe is normally the proximate cause
of the continued deletions, but there's some other stuff that should be
cleaned up also.


Courtesy of flrman1, here:
http://forums.techguy.org/archive/index.php/t-280212.html

"First in safe mode click on My Computer then click Tools > Folder Options.
In Folder options click on the View tab. Under Files and Folders tick "Show
hidden files and folders" then uncheck "Hide file extensions for known file
types" and uncheck "Hide protected operating system files (recommended)".
Now click "Like current folder" then "Apply" and "OK"

Now find and delete these files:

C:\WINNT\system\windupdate.exe (added by JimByrd: note the spelling -
the added 'd')
C:\WINNT\system.css

Delete this folder:

c:\freescan

Also in safe mode navigate to the C:\Windows\Temp folder. Open the Temp
folder and go to Edit > Select All then Edit > Delete to delete the entire
contents of the Temp folder.

Go to Start > Run and type %temp% in the Run box. The Temp folder will open.
Click Edit > Select All then Edit > Delete to delete the entire contents of
the Temp folder.

Finally go to Control Panel > Internet Options. On the General tab under
"Temporary Internet Files" Click "Delete Files". Put a check by "Delete
Offline Content" and click OK. Click on the Programs tab then click the
"Reset Web Settings" button. Click Apply then OK.


Empty the Recycle Bin"



Run the fix file again after you're done w/the above.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In