corrupt system file

N

netwireless

New Member
Hi. the problem i am having is quiet often, i get an error message saying that boot critical file E:\windows\system 32\ drivers\ ntfs.sys is corrupt and the error code is 0x491 when this happens the only way i now how to fix this, is by reformatting the computer, but having to do this everytime this happens, and it happens alot, is a huge pain in the butt. can someone please help fix this problem. my operating system is windows 7 home premium 64bit.
 
Do you have the windows install cd? If so, then boot to the cd and choose to repair your OS. This should overwrite the file with a new one. Also are you sure you aren't infected? Ntfs.sys is one that is targeted my malware.
 
hi.thanks for your reply but i have done this many times and it has not fixed the problem then i have to reformatt as for malware i run norton 360 regularly and my system is clean, is there anything else i could do short of changing to another operating system .
 
And you think just because you run norton 360 that you won't get infected??? It doesn't matter what program you run, sooner or later, you will get infected. And if you do the same thing over and over again, you'll just reinfect yourself.

If its the same file over and over again, then either you aren't running a genuine Operating system, you keep reinfecting yourself. Or some other anomaly is happening. So you can't boot into windows at all?
 
no i don't think i won't or can't get infected because i run norton 360. what im saying is i have tried what you have suggested and it has not worked at all in the past and the only option i have had is to reformatt my computer as for my operating system it is genuine could it be something other than the os that is causing this problem.
 
Have you tested your hard drive to verify its not failing? I don't think this could cause it but who knows. I just find it weird thats its the same file over and over again.
 
ok i will run a check on the hard drive to see if its a problem also what other programs would you use to see if there is a virus or malware lurking around. at the moment i have norton 360, and hazard shield an antispyware program running on my system.
 
Get rid of hazard shield and do the following if you can boot to windows.

1.

Please download and run TDSSkiller

When the program opens, click on the start scan button.

TDSSKiller will now scan your computer for the TDSS infection. When the scan has finished it will display a result screen stating whether or not the infection was found on your computer. If it was found it will display a screen similar to the one below.

infection-found.jpg


To remove the infection simply click on the Continue button and TDSSKiller will attempt to clean the infection.

When it has finished cleaning the infection you will see a report stating whether or not it was successful as shown below.

scan-completed.jpg


If the log says will be cured after reboot, please reboot the system by pressing the reboot now button.

After running there will be a log that will be located at the root of your c:\ drive labeled tdsskiller with a series of numbers after it. Please open the log and copy and paste it back here.


2.

Please download Malwarebytes' Anti-Malware from here or here and save it to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to
    • Update Malwarebytes' Anti-Malware
    • and Launch Malwarebytes' Anti-Malware
  • then click Finish.
  • If an update is found, it will download and install the latest version. Please keep updating until it says you have the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • A log will be saved automatically which you can access by clicking on the Logs tab within Malwarebytes' Anti-Malware

If for some reason Malwarebytes will not install or run please download and run Rkill.scr, Rkill.exe, or Rkill.com. If you are still having issues running rkill then try downloading these renamed versions of the same program.

EXPLORER.EXE
IEXPLORE.EXE
USERINIT.EXE
WINLOGON.EXE

But DO NOT reboot the system and then try installing or running Malwarebytes. If Rkill (which is a black box) appears and then disappears right away or you get a message saying rkill is infected, keep trying to run rkill until it over powers the infection and temporarily kills it. Once a log appears on the screen, you can try running malwarebytes or downloading other programs.



Download the HijackThis installer from here.
Run the installer and choose Install, indicating that you accept the licence agreement. The installer will place a shortcut on your desktop and launch HijackThis.

Click Do a system scan and save a logfile

Most of what HijackThis lists will be harmless or even essential, don't fix anything yet.

When the hijackthis log appears in a notepad file, click on the edit menu, click select all, then click on the edit menu again and click on copy. Come back to your reply and right click on your mouse and click on paste.

Post the logfile that HijackThis produces along with the Malwarebytes Anti-Malware log
 
hi. ran melwarebytes and tdsskiller and nothing found don't think i will bother with hijackthis. yeh dont know how to go about checking my hard drive it's a ssd and i cant find any tools on the net .
 
You must log in or register to reply here.
Back
Top