Gerard's Blog

Monday, 28 June 2010

boot.ini being deleted

My work colleague had a strange problem where boot.ini was being deleted on a Windows XP box. He rebuilt the boot.ini with bootcfg /rebuild, after a restart he would get the boot menu, boot into Windows then find that boot.ini had been deleted again, I automatically thought it was malware or a virus, I then found on the net that uninstalling IE would fix the problem, which it did, but as soon as IE was reinstalled the problem persisted, that's when I started to think IE plugins, after a bit of searching it turned out to be the Ask Toolbar plugin, the file responsible for the file deletions was 'ASKUpgrade.exe' in 'C:\Program Files\AskBarDis\bar\bin' this is a known problem on the net, one article can be found here