lost c:\windows\system32\system32.exe file

[phfactor82]

i need some help! I lost my c:\windows\system32
\system32.exe file due to a virus, my computer software
(norton) got the file after it attacked, but it
quarentined and deleted it. Any how i can put a good on
there that does not have the virus?

 

[Guest]

Maybe this file was a virus file. It's not on my system (XP Pro).

 

[Bruce Chambers]

Greetings --

The System32.exe file *is* a virus; it's certainly not a valid
WinXP system file. You don't want that file. Pay particular attention
to _all_ of the removal instructions:

W32.Kwbot.C.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.c.worm.html

Additionally, MS-MVP Doug Knox has kindly scripted a tool that
should help:
http://www.dougknox.com/xp/scripts_desc/xp_clean_kwbot.htm


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Kenrick Fu]

system32.exe is itself a virus! NAV removed the virus physically from your
computer, but it did not remove its reference in the system registry, you
have to follow the steps below to remove its reference from the system
registry:
1. Click Start, and then click Run. (The Run dialog box appears.)
2. Type regedit
3. Then click OK. (The Registry Editor opens.)
4. Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

5. In the right pane, delete the value:

System32 %Windir%\System32.exe

6. Exit the Registry Editor and restart the computer.