C:\Windows\system32\tools\delfolders.exe

[Guest]

Good morning

This call, somehow, finds itself into My XP Registry's "Run Once" commands

Of course, 'C:\Windows\system32\tools\delfolders.exe' does NOT exist on this or any of the other XP machines I have working

I take it out of the registry and all is well until I have another situation requiring a restart.. and it's comes right back

Can anyone tell me how it gets into the registry and how I can eliminate the issue

Thanks in advance for your advice

 

[Lanwench [MVP - Exchange]]

Hmmm - antivirus software updated, and have you run a full scan? Run Windows
Update to make sure you have all critical patches? Firewall enabled? Have
you tried any spyware/malware removal tools?

See below - hope something helps.

*** Good security housekeeping tips, in no particular order: ***

* See http://securityadmin.info/faq.htm

* Go to www.lavasoftusa.com and download AdAware...install, launch, update &
run it. This can rid your computer of spyware/adware. Also find SpyBot
Search & Destroy as it will sometimes find things AdAware doesn't, and vice
versa.

* Use antivirus software (www.grisoft.com has a freebie) and update it
regularly - at least once a week; daily if possible.

* Use a good firewall to block access to your computer from the Internet
(www.sygate.com is a decent freebie for a standalone workstation; hardware
appliances are a better choice for networks). For software firewalls, see
BlackIce or the freebie at www.sygate.com - but you do get what you pay for.
For a good hardware firewall, see NetGear or Linksys or DLink - they all
make easy to use products, but make sure they're true firewalls and not just
NAT devices, as those are not going to stop anyone. Expect to pay about
$100-$120 USD for a good hardware firewall.

* Get a popup blocker to stop IE popups, such as www.panicware.com (they
offer a free one) or try the new Google toolbar 2.0 which does the same
thing (and is just plain cool)

* Run Windows Update regularly (http://windowsupdate.microsoft.com) to get
all the latest patches for your operating system.

* See http://www.mvps.org/inetexplorer/Darnit.htm for lots of information on
browser hijacking and how to stop it

* Do not use Imesh or Kazaa any other peer-to-peer file sharing software,
ever.

* Do not use Hotbar.

 

[Torgeir Bakken (MVP)]

This call, somehow, finds itself into My XP Registry's "Run Once" commands.

Of course, 'C:\Windows\system32\tools\delfolders.exe' does NOT exist on this or any of the other XP machines I have working.

I take it out of the registry and all is well until I have another situation requiring a restart.. and it's comes right back.

Can anyone tell me how it gets into the registry and how I can eliminate the issue?

Hi

It looks like it is some leftovers from a mainboard's driver installer:

http://groups.google.com/[email protected]

Deleting reboot.exe from the startup folder solved the problem
with the reappearing DelFolders.exe in registry.