Solved

boot.ini deleted every time Windows boots

Posted on 2009-05-05
4
3,166 Views
Last Modified: 2012-08-13
AVG and Kaspersky don't see any infections. Nothing suspicious in startup/Hijackthis. Bootcfg /rebuild will recreate the boot.ini then Windows will boot once, but when I get into Windows there is no boot.ini. So of course if I reboot I get the HAL.DLL error due to no boot.ini. Even made a boot.ini on another system with only read permissions and still got deleted. Anyone seen a virus that does this or know where the line might be that is deleting it? Searched registry, win.ini, and system.ini.
0
Comment
Question by:DominionTech
4 Comments
 
LVL 7

Accepted Solution

by:
spamster earned 500 total points
ID: 24306360
I've never ran across this, but I would try disabling all non-Microsoft services and startup items (msconfig) and then reboot to see if it still gets deleted. That would rule out a rogue service or most startup apps.
0
 
LVL 2

Expert Comment

by:FatManc
ID: 24306512
Have you checked the event log for hardware errors? Perhaps run a chkdsk to ensure the integrity of the drive too.

Thanks
John
0
 
LVL 15

Expert Comment

by:tntmax
ID: 24306615
Yeah, we just had someone who kept losing a different file each boot, and it was due to a dying hard drive.
0
 
LVL 2

Author Comment

by:DominionTech
ID: 24306850
Found it! ASKUpgrade service. Was hiding itself from Hijackthis. Disabled it in msconfig(thanks spamster) and now boot.ini is still there when I reboot. Couldn't find very much information on the service, even reported as non-malicious toolbar... But after svchost spiked the CPU to %100 I knew it had to be a service. Going to see if Spybot or Malwarebytes detects and traces of it. Why would spyware toolbar want to delete boot.ini? Sort of defeats the purpose if you can't boot....
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Disclosure: Use this tutorial only when no other options helps to get Windows XP running without any problems and you don't want to format the drive. The back up of the data is the responsible of the user, however there is a description of how t…
There are 2 things you must have in order to connect to the internet behind a router, The "Gateway IP" of the router, which is usually something like 192.168.xxx.1, I've seen routers with default values of: 192.168.0.1, 192.168.1.1, 192.168.11.1, …
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now