Cannot find C:\Windows\System32\System32.exe

[JR]

"Cannot find C:\Windows\System32\System32.exe"

I'm getting this message when I start up. I tried to
follow the instructions on the microsoft website, but
when I bring up "run" and type in "regedit" the entire
window shuts down so that I cant even attemp to fix this
problem. I read that this message occurs because of an
incomplete removal of a bot virus. Can someone help?

Thanks,
JR

 

[Will Denny]

Hi JR

That file is part of a worm. Have a look at the following link:

http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

--

Will Denny
MS-MVP Windows - Shell/User


| "Cannot find C:\Windows\System32\System32.exe"
|
| I'm getting this message when I start up. I tried to
| follow the instructions on the microsoft website, but
| when I bring up "run" and type in "regedit" the entire
| window shuts down so that I cant even attemp to fix this
| problem. I read that this message occurs because of an
| incomplete removal of a bot virus. Can someone help?
|
| Thanks,
| JR

 

[Bruce Chambers]

Greetings --

System32.exe is _not_ a valid Windows file, but rather a file name
commonly used for a component of several well-known viruses, worms,
and Trojans.

To name a few:

W32.Kwbot.C.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.c.worm.html

W32.Mari.mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Backdoor.SysXXX
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sysxxx.html

Backdoor.Miranda
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.miranda.html

W32.Kitro.A.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.kitro.a.worm.html

W32.HHLW.Logpole.C
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.logpole.c.html

Backdoor.Darksun
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.darksun.html

W32.Trilisa.mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Additionally, MS-MVP Doug Knox has kindly scripted a tool that
could help:
http://www.dougknox.com/xp/scripts_desc/xp_clean_kwbot.htm


Bruce Chambers

--
Help us help you:




You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH