Autochk program not found - skipping autocheck
Smirnoff
Rkill to stop malware running before I could launch Malwarebytes and
Superantispyware.
A number of trojans were found and removed.
I also installed Microsoft Security Essentials after uninstalling AVG and
using the complete uninstall tools listed in the MSE forum (Norton, McAfee
etc.). MSE also found a couple of nasties and removed them.
Before the above, at boot up I was getting the error message as per the
post's title but the computer still booted into Windows. I thought I'd run
Checkdsk but now get two messages telling me Autochk cannot be found (still
booting into Windows though).
Have done various searches and it seems that removing something like Norton
can place Checkdsk into a hidden partition. Most of the posts seem old,
referring to a program called Ptedit (I think) but referring to floppy
disks.
Others referred to inserting Windows CD (I assume my friend has an OEM) and
doing a repair install. Others say just do a normal install and missing
files will be copied. Certainly don't want to lose any data.
Just wondered if there is a newer solution?
Smirnoff
"Smirnoff" <som...@nospam.invalid> wrote in message
news:_cCdnds3YPtotsLT...@bt.com...
Sorry to reply to my own post but meant to add that friend's PC is HP
Compaq.
He says he didn't receive an installation disk. Tried F8, F10, F11 but
doesn't seem to have any access to a recovery/repair partition, only stuff
like Boot sequence, Safe Mode etc.
Tim Meddick
Viruses - the missing file is called [AUTOCHK.EXE] and should be located in
your [C:\WINDOWS\system32] directory.
If you quote the service pack number (you can find this on the [general]
tab of Control Panel > System Properties) I will post the correct version
for you.
It may be that Windows File Protection (WFP) may have been disabled by the
virus, there should be copies of all essential system files in a folder
called :
C:\WINDOWS\system32\dllcache
...and you may find copies of missing files there. WFP should have
instantly replaced the file if it was damaged or deleted - this seems not
to have happened.
Please return post with either your Service Pack number or if you managed
to find a copy in your [dllcache] folder.
==
Cheers, Tim Meddick, Peckham, London. :-)
"Smirnoff" <som...@nospam.invalid> wrote in message
news:PoWdnasKTqia1sLT...@bt.com...
Smirnoff
Just had a phone call from my friend. He says that although he did not
receive an installation disk, he DID make several recovery CDs when prompted
by HP when he first set up his computer. Phew!
Have gone through start menu and there is an HP recovery/repair program. It
asks for either the installation disk or the first of the recovery CDs, so I
hope we can do the job with them (if he can find them).
"Tim Meddick" <timme...@o2.co.uk> wrote in message
news:j3nik2$d5u$1...@speranza.aioe.org...
Tim Meddick
No problem - just post again and continue this thread if you find that you
need to...
==
Cheers, Tim Meddick, Peckham, London. :-)
"Smirnoff" <som...@nospam.invalid> wrote in message
news:UI-dnexuI9au0sLT...@bt.com...
Smirnoff
Will do. Just hope that HP gives you the option to replace/repair system
files without having to throw the baby out with the bathwater and have to do
an "out-of-the-box" complete recovery.
"Tim Meddick" <timme...@o2.co.uk> wrote in message
news:j3nk3i$h9s$1...@speranza.aioe.org...
Tim Meddick
Well, like I said, notwithstanding the success or failure with your
recovery option, you can still check out the :
C:\WINDOWS\system32\dllcache
...folder, and / or post the Service Pack number and I will simply post the
correct version of [AUTOCHK.EXE] on a file sharing site for you to
download (or any other file[s] that you find you are missing)....
==
Cheers, Tim Meddick, Peckham, London. :-)
*NB If you do decide to use the HP complete recovery - if you suspect it
will restore the PC to factory condition - remember to copy any personal
files (My Documents folder) to an external portable drive otherwise they
may be lost for good!
"Smirnoff" <som...@nospam.invalid> wrote in message
news:ed6dncuFiJJzx8LT...@bt.com...
Smirnoff
That's strange, I've just checked my own computer (XP Pro, same as my
friend's) which is working just fine but cannot see
C:\WINDOWS\system32\dllcache
"Tim Meddick" <timme...@o2.co.uk> wrote in message
news:j3nojc$t2q$1...@speranza.aioe.org...
Smirnoff
Sorry, now realise you have to unhide system files in order to see
C:\WINDOWS\system32\dllcache
"Smirnoff" <som...@nospam.invalid> wrote in message
news:KN2dnZM5fMT788LT...@bt.com...
Smirnoff
Hi again Tim,
Friend's computer is XP Pro, version 2002, SP3.
Tried installing iTunes and it tells me d3d9.dll is missing as well!!
"Smirnoff" <som...@nospam.invalid> wrote in message
news:4aKdneZf3IaJ78LT...@bt.com...
Tim Meddick
(C:\WINDOWS\system32\dllcache) the new location will be specified in the
registry under the following key / value :
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"
"SFCDllCacheDir"="C:\WINDOWS\system32\dllcache"
If Window's File Protection is *disabled* you will find the following
registry value (under the same key (above)) will be set to 1 ;
"SFCDisable"="1"
...(if WFP is enabled it will be set to 0 [zero] )
However, you may still be able to locate the dllcache if you do a file
search from the Window's Command Prompt (type "cmd.exe" into the "Run" box
on the Start Menu)...
At the command prompt, type the following ;
dir /a /s c:\dllcache
...failing that, do a full search for any copies of the [AUTOCHK.EXE] file
;
dir /a /s c:\autochk.exe
==
Cheers, Tim Meddick, Peckham, London. :-)
"Smirnoff" <som...@nospam.invalid> wrote in message
news:KN2dnZM5fMT788LT...@bt.com...
Smirnoff
SFCDisable is showing 0x00000000 (0)
"Tim Meddick" <timme...@o2.co.uk> wrote in message
news:j3nsku$832$1...@speranza.aioe.org...
Tim Meddick
Have placed them into a cabinet file (*.cab) named "Files.cab" at the
following address :
http://www.4shared.com/file/LZc49lg0/files.html
...click on the above link and press on "Download" (you may have to press
on it again after a 20 second wait).
When you have the file "Files.cab", double-click on it, and then
right-click on both the files within and choose "Copy" - then paste the
files in the relevant folder on the problem machine (system32).
==
Cheers, Tim Meddick, Peckham, London. :-)
"Smirnoff" <som...@nospam.invalid> wrote in message
news:M_-dnajTdOe_5cLT...@bt.com...
Tim Meddick
as your friend's, you can simply copy both [AUTOCHK.EXE] and [D3D9.DLL]
from your [system32] directory to a removable pen [flash] drive and copy
them over to your friend's PC!!
Otherwise I'll post the two files for you now and re-post the relevant URLs
for you soon...
==
Cheers, Tim Meddick, Peckham, London. :-)
"Smirnoff" <som...@nospam.invalid> wrote in message
news:BtGdnfA8jKvV6MLT...@bt.com...
>
> Hi again Tim,
>
> Friend's computer is XP Pro, version 2002, SP3.
>
> Tried installing iTunes and it tells me d3d9.dll is missing as well!!
>
> "Smirnoff" <som...@nospam.invalid> wrote in message
> news:4aKdneZf3IaJ78LT...@bt.com...
>>
>
> < clipped >
>
Smirnoff
Checkdsk currently running. Will report back.
Thanks Tim
"Tim Meddick" <timme...@o2.co.uk> wrote in message
news:j3ntrh$b91$2...@speranza.aioe.org...
Smirnoff
to see results of winlog, it asks me what program i want to use to open it!!
Tried defrag but another .dll missing.
Whatever trojan it was made a good job of it. Pending my friends x amount of
recovery disks would appreciate any other advice.
"Smirnoff" <som...@nospam.invalid> wrote in message
news:xK6dnX8ZTaYmGcLT...@bt.com...
Smirnoff
Regarding defrag problem, a search reveals that it is a file association
issue. It appears it needs to be opened with mmc (a hammer icon) in
system32, this file is missing (although I do have mmcperf). Any possibility
of providing this?
It may be that this will also cure the Manage>Event Viewer problem as well
because it asks me what program to use to open it.
Thanks
"Smirnoff" <som...@nospam.invalid> wrote in message
news:abCdnZEqr7-FVsLT...@bt.com...
Smirnoff
As I have the same OS and SP3, I copied my mmc.exe file and placed it in
system32 folder of my friend's computer.
I associated defrag to open with the program but all I get now is "Class not
registered". Same when I try to open My Computer>Manage.
Have done various searches but it seems most have to do a repair install. Oh
well.
"Smirnoff" <som...@nospam.invalid> wrote in message
news:oMydnRKHq5be5P3T...@bt.com...
Smirnoff
In Add/Remove programs there was not an option to Remove.
Tried a fresh install of SP3 but now cannot even boot into Safe Mode.
Computer continually reboots.
More of a problem now than I had before!!
"Smirnoff" <som...@nospam.invalid> wrote in message
news:rY6dndzskcDZD_3T...@bt.com...
yukonron
Hi Smirnoff
You can probably find the missing dll files here.
http://www.dll-files.com/
Then you might be able to do a system restore from safe mode. You might
have to contact compaq but they will only want to sell you a recovery
disk Since his pc is going on 10 years old you could always buy a cheap
hard drive and do a clean install then slave the old drive so he wouln't
lose anything. Just to double check you did go to *Start> Run* and then
typed *chkdsk.* If you have to install a new OS stick to XP It's better
than Vista and I doubt his PC would have the horsepower to run Windows
7. Anyway there are options out there. Worst case he'll have a brand new
OS and an extra hard drive.
good luck
yukonron
Smirnoff
Uninstalled SP3 via the wizard and rebooted. Computer told me that SP3 was
still installed! However, files were copied during process and may have
corrected original SP3 installation when removing second instance.
Can now access MMC.
Had to update graphics and audio drivers and reinstall IE8/Firefox.
Seems to be working OK now.
Thanks to all who helped.
"Smirnoff" <som...@nospam.invalid> wrote in message
news:bs2dnd6OWe42jP_T...@bt.com...