Error Message on Startup

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,
Following a new install of Windows XP pro, due to disk failure,now get a
message on startup saying

Windows cannot find

C:\windows\NT\nrcs.exe

Make sure you typed the name correctly and try again,
to search for a file,clickthe start button and then click search.


I have tried all I know(didnt take long I assure you)but I cannot stop it
happening.

Any suggestions
JJF
 
Put "nrcs.exe" in your search engine. I just googled it and came up with
sites that say nrcs.exe is malware which can steal your passwords. I assume
you have an antivirus program and I hope you will use it. Let me know if you
find something bad in there.
 
JJF1312 said:
Hi,
Following a new install of Windows XP pro, due to disk failure,now get a
message on startup saying

Windows cannot find

C:\windows\NT\nrcs.exe

Make sure you typed the name correctly and try again,
to search for a file,clickthe start button and then click search.


I have tried all I know(didnt take long I assure you)but I cannot stop it
happening.

Any suggestions
JJF
Click to expand...

You are infected !!!


Rgds
Roberto
 
JJF,

As far as nrcs.exe, it's probably removed but the Run command is still in
the Startup.

* Click Start > Run, type msconfig , click OK > select the 'Startup' tab
* Uncheck the reference to 'nrcs.exe', click, restart computer
* Run a full anti-spyware scan & virus scan

Drew
 
Just an update,
It is as Tonyo suggests a Malware and yes I am now infected, how I dont know
as I have a variety of programs running that is supposed to stop any
Malware,inc Windows Live OneCare, anyhow having done as Drew Tognola
suggested I found that there was no mention of it in the " startup " system
,and having run a virus check that says it will find it, it says there is
nothing on the system,but low and behold it appears next time I startup.
Any more suggestions
 
Thanks for all the help but nothing suggested has worked.
All my virus checkers inc Windows Live OneCare says there is nothing on the
system.
There is no mention of it in the startup tabs.
But it still appears when I start up my PC.
 
Try Start/Search/Files and folders, then insert phrase "nrcs.exe". Then run
it. You may find where some folder of this name is hidden away. If you can
then get to this folder, you can delete it, supposing it exists. Good luck,
and let us know how you get on.
 
JJF1312,

Also open Regedit (Start > Run, type regedit, click OK).
Click to highlight 'My Computer',
Select 'Edit > Find', type nrcs.exe & click 'Find Next',
After each find, right-click the folder it's contained in, select 'Export'.
Name & save as a backup.
Now right-click & delete the nrcs.exe reference.
Continue selecting 'Find Next' and repeating the steps (Backup & Delete)

Drew
 
Thanks Drew,
Have tried as you suggested and found nrcs.exe using regedit and deleted it.
sorry to say it still appears on start-up
 
JJF1312,

There is a product that claims to get rid of nrcs.exe with the trial
version. Here is the link to the PrevX site and a site that gives a review
of PrevX since I wasn't familiar with this company.

http://fileinfo.prevx.com/spyware/qqf0ee33453094-NRCS13564891/NRCS.EXE.html

http://netsecurity.about.com/od/readproductreviews/fr/aapr091904.htm

Are you just receiving the message 'Windows cannot find
C:\windows\NT\nrcs.exe' ? No other popups or odd behavior?

ps-past experience has pointed to only a few places to look to correct this
type of message at startup:

1) Start > Run > msconfig, click OK > Startup tab, removing the .exe
reference

2) Start > Programs > Startup, removing the .exe reference

3) Open Regedit, navigate to:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run, deleting
the the .exe reference

4) Open Regedit, navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, deleting
the the .exe reference

Drew
 
Hi Drew,
Had already downloaded and run PrevX1 and it told me that there as no
Malware on the system.
I can think of nothing else to try, and although there appears to be no
other effects except for the message at System Startup its still a bit
perplexing.
Thanks for all you help
John
 
Hi John,

I have one more place to check in the registry to look,
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder

And a possible temporary solution until the exact cause is found.

* open Windows Explorer, click into the 'WINDOWS' folder
* If you have an NT folder continue to the next step,
if not, right-click and create a new folder, name it NT (C:\WINDOWS\NT)

* open Notepad, select 'File > Save as'
* change the 'Save as type' from 'Text Documents (*.txt)' to 'All Files'
* For the 'File name' type nrcs.exe
* With the 'Save in' drop-menu navigate to C:\WINDOWS\NT
* Click 'Save'

This should get rid of the error message and won't do any harm to your
computer. Somewhere in your registry is a run command attempting to start
nrcs.exe other than the normal paths I listed in my last post.

Drew
 
Hi Drew

Have had to re-install Windows due to a different problem, this has sorted
out my startup problem also.
Many thanks for all your help
 
Back
Top