Improve company productivity with a Business Account.Sign Up

x
?
Solved

boot.ini deleted every time Windows boots

Posted on 2009-05-05
4
Medium Priority
?
3,183 Views
Last Modified: 2012-08-13
AVG and Kaspersky don't see any infections. Nothing suspicious in startup/Hijackthis. Bootcfg /rebuild will recreate the boot.ini then Windows will boot once, but when I get into Windows there is no boot.ini. So of course if I reboot I get the HAL.DLL error due to no boot.ini. Even made a boot.ini on another system with only read permissions and still got deleted. Anyone seen a virus that does this or know where the line might be that is deleting it? Searched registry, win.ini, and system.ini.
0
Comment
Question by:DominionTech
4 Comments
 
LVL 7

Accepted Solution

by:
spamster earned 1500 total points
ID: 24306360
I've never ran across this, but I would try disabling all non-Microsoft services and startup items (msconfig) and then reboot to see if it still gets deleted. That would rule out a rogue service or most startup apps.
0
 
LVL 2

Expert Comment

by:FatManc
ID: 24306512
Have you checked the event log for hardware errors? Perhaps run a chkdsk to ensure the integrity of the drive too.

Thanks
John
0
 
LVL 15

Expert Comment

by:tntmax
ID: 24306615
Yeah, we just had someone who kept losing a different file each boot, and it was due to a dying hard drive.
0
 
LVL 2

Author Comment

by:DominionTech
ID: 24306850
Found it! ASKUpgrade service. Was hiding itself from Hijackthis. Disabled it in msconfig(thanks spamster) and now boot.ini is still there when I reboot. Couldn't find very much information on the service, even reported as non-malicious toolbar... But after svchost spiked the CPU to %100 I knew it had to be a service. Going to see if Spybot or Malwarebytes detects and traces of it. Why would spyware toolbar want to delete boot.ini? Sort of defeats the purpose if you can't boot....
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Can you find a fax from a vendor you saved a decade ago in seconds? Have you ever cursed your PC under your breath during an audit because you couldn’t find the requested statement or driver history?  If you answered no to the first question or yes …
Nuance's PaperPort may display this error message: PaperPort appears to be running Windows XP Compatibility Mode which may result in errors. We recommend disabling Compatibility Mode for the PaprPort.exe program, see Technote 6629. This articl…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
To export Lotus Notes to Outlook PST or Exchange and Domino Server files to Exchange Server or PST files with ease, go for Kernel for Lotus Notes to Outlook conversion tool. Through the video, you can watch the conversion process. A common user with…

579 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question