Autoexec.nt

[thecreator]

Hi All,

Background: Helping a friend on his computer with Windows XP Home
Edition Service Pack 2 and every time after we restore autoexec.nt to
C:\Windows\System32 and shutdown and restart the computer this file
disappears from c:\windows\system32.

Question: Any ideas?

This is the command we use from cmd:
expand c:\windows\i386\autoexec.nt_ c:\windows\system32\autoexec.nt



thecreator

 

[Patti MacLeod]

Hi thecreator,

Have a look at the information here:
MS-DOS or 16-bit Windows-based program Error Message
http://www.kellys-korner-xp.com/xp_m.htm#16bit



Regards,

 

[thecreator]

Hi Patti,

Read the information and had him download the fix and also used Expand
for autoexec.nt and each time he reboots, he loses autoexec.nt.

Any other suggestions?

thecreator

 

[Dr Teeth]

Any other suggestions?

Set the attributes to read only and hidden.
--
Cheers,

Guy

** Stress - the condition brought about by having to
** resist the temptation to beat the living daylights
** out of someone who richly deserves it.

 

[Patti MacLeod]

I guess he didn't find a WINDUPDATE.EXE file, either. The loss of
autoexec.nt when he reboots may be caused by some other
malware........WINDUPDATE.EXE seems to be the most common one for that
problem.



Regards,

 

[Guest]

It's caused by adware/spyware ... Hard to get rid of also.
The file is wupdt.exe not winupdate.exe which will return by itself
anyway. Also look for a file trgrokxd.exe in your system32 dir which
also comes back.

I used Ad-Aware, SpyBot and SpySweeper which all found it (did it in
safe mode) but never really fully removed it for good even though they
said my system was clean. Add the following line to your
system32\drivers\etc\HOSTS file which will stop some of it:

127.0.0.1 sysupdate.grandstreetinteractive

This site is part of the problem.

Set your HOSTS file attributes to read-only after you edit it.