Another complaint of system 32 when starting computer but differen

[Guest]

OK so I have a folder of system 32 opening every time I start windows. I have
read many web pages like

System32 Folder Opens When Logging on to Windows XP
http://support.microsoft.com/?kbid=170086

For an automated Edit go here:
http://www.kellys-korner-xp.com/xp_tweaks.htm

and I also get this in the follwing entry in both keys:
(Default ) REG SZ (value not set)
which for the record, I dont think is incorrect!?

But cant find any missing or incorrect values in either of the suggested
keys. Do I need to reinstall XP or is there a simpler solution?

Thanks for help

 

[Guest]

Just to add:

I have found something which looks dodgy. What do you think?

Name= SoundMan
Type= REG_VZ
Data= SOUNDMAN.EXE

There is no C;\...
so no address and it just looks odd with capitals.
Does anyone know if this could be the problem?

Cheers

 

[Guest]

Actually there is two others in the other key. Have a look:


Name= CU1
Type= REG_SZ
Data=

The other is identical but nale is CU2.
BOTH HAVE NO DATA. I should delete these I am thinking. Woulde someone who
has more than two brain cells, which obvious I only have, please help!
Cheers

 

[Wesley Vogel]

soundman.exe may or may not be a legit program.

soundman.exe is a installed with Sound cards made by Realtek. This process
merely places an icon on the system tray for easy access to diagnostic
features.
http://www.liutilities.com/products/wintaskspro/processlibrary/soundman/

W32/Agobot-JS is a worm that spreads to remote shares with weak passwords.

The worm copies itself as soundman.exe to the Windows system folder

To run on startup the worm installs itself as a service called soundman and
sets the following registry entries:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\soundman
= soundman.exe

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\soundman
= soundman.exe
http://www.sophos.com/security/analyses/w32agobotjs.html

(Default ) REG SZ (value not set) is fine.

Value Name= CU1
Data Type= REG_SZ
Value Data=

is a startup orphan. It was left behind when something got uninstalled. It
will appear blank in msconfig.

Delete Value Name= CU1

That may be what's causing system32 to open at boot.

Also delete Value Name= CU2 Same applies to CU2 as CU1.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Wesley Vogel I could kiss you (obviously wont but you know what I mean!!!lol).
I deleted CU1 AND CU2 as you suggested and also soundman.exe just because
from what you said, and the fact that I didnt recognise the sound card by
Realtek, it felt the right decision.
When restarted the system 32 window does not open. Hurray!!!
Can I just say, this is my first visit to this forum and I really appreciate
you helping me. I am very grateful.
Cheers mate

 

[Wesley Vogel]

Glad to hear that you fixed your problem. Keep having fun.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In