Files Missing from System32 Folder

G

Guest

I have ran into a major problem over the last couple of weeks. It started on
a couple of my workstations (XP Pro). The initial problem was a system that
said Hal.dll was missing or corrupted. After trying all of the suggestions I
could find online I ended up re-formating the computer and re-installing
windows.

While working on this system I had 3 other systems do the same thing. The
next 3 received a message from the WFP that system files had been overwritten
and I needed to insert my XP Pro CD.

On one of the systems I was able to insert the CD and then expand the
Hal.dll from the cd. This computer was fine.

On the next one I had to use the repair install about 5 times and
continually expand the hal.dll and all other dll, nls, and exe files for the
system32 directory.

On one system that I repaired it worked fine for about 3-4 days and now the
problem is back.

After fighting with these, I have now noticed that 2 of my servers are
showing the same signs. One is Server 2000 and the other is Server 2003. We
started having problems accessing Citrix due to the computer not being able
to verify that it is a legal copy of windows, and requesting activation.

Upon further investigation I found that this server is missing the hal.dll
and many other dll's from system32. I tried to run Event Viewer to see any
errors around the time that this started, but Event Viewer was missing. I
also found that regedit, and many other system tools were missing. I
expanded event viewer and regedit to look at the logs.

In event viewer around the time we first noticed the problem. There are
many logs from WFP that system file had been overwritten, and then restored
by WFP. I have also found that about 10 seconds before the first WFP error
Windows Update tried to run, but could not find anything to download.

I have run complete virus scans on these systems and have not been able to
find anything.

Any help would be greatly appreciated.

Thank you,
Derek Jeffries
IT Director
GroupOne Healthsource
(e-mail address removed)
 
R

Richard Urban

Other than the operating system, what "common" software/hardware do you have
installed on these computers that may be causing this.

--

Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)

Quote from George Ankner:
If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top