Missing shell file?

[Mike Dobony]

At startup I get the message:

Cannot find the file 'C:\WINNT\system32\cmd32.exe' (or one of its
components). Make sure the path and filename are correct and that all
required libraries are available.

In the Registry it shows this file as a shell file. I tried to extract it
from the W2K install disk, but cannot find it. The message is too vague for
searching the support forum. How do I get this file back? I believe it is
causing me to be unable to install programs. Thanks.

Mike D.

 

[Dave Patrick]

You don't want it.

http://www.google.com/search?hl=en&lr=&newwindow=1&q=cmd32.exe+site:trendmicro.com

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| At startup I get the message:
|
| Cannot find the file 'C:\WINNT\system32\cmd32.exe' (or one of its
| components). Make sure the path and filename are correct and that all
| required libraries are available.
|
| In the Registry it shows this file as a shell file. I tried to extract it
| from the W2K install disk, but cannot find it. The message is too vague
for
| searching the support forum. How do I get this file back? I believe it
is
| causing me to be unable to install programs. Thanks.
|
| Mike D.
|
|

 

[Mike Dobony]

You don't want it.

http://www.google.com/search?hl=en&lr=&newwindow=1&q=cmd32.exe+site:trendmicro.com

Then what do I do with it? Do I get rid of the entire key (Shell) or just
the data (Explorer.exe C:\WINNT\system32\cmd32.exe)? Do I leave
Explorer.exe?

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| At startup I get the message:
|
| Cannot find the file 'C:\WINNT\system32\cmd32.exe' (or one of its
| components). Make sure the path and filename are correct and that all
| required libraries are available.
|
| In the Registry it shows this file as a shell file. I tried to extract it
| from the W2K install disk, but cannot find it. The message is too vague
for
| searching the support forum. How do I get this file back? I believe it
is
| causing me to be unable to install programs. Thanks.
|
| Mike D.
|
|

 

[Dave Patrick]

Get hold of an anti-virus solution or use one of the links to manually rid
your system of the virus.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Then what do I do with it? Do I get rid of the entire key (Shell) or just
| the data (Explorer.exe C:\WINNT\system32\cmd32.exe)? Do I leave
| Explorer.exe?

 

[Gary Smith]

Then what do I do with it? Do I get rid of the entire key (Shell) or just
the data (Explorer.exe C:\WINNT\system32\cmd32.exe)? Do I leave
Explorer.exe?

What key is it that contains this reference?

 

[Mike Dobony]

Get hold of an anti-virus solution or use one of the links to manually rid
your system of the virus.

The file is already gone. All I have is a reference to the file in the
registry.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Then what do I do with it? Do I get rid of the entire key (Shell) or just
| the data (Explorer.exe C:\WINNT\system32\cmd32.exe)? Do I leave
| Explorer.exe?

 

[Mike Dobony]

What key is it that contains this reference?

Guess it doesn't matter now. I can't find the reference. I also found
another virus that only the anti-virus SW finds, ?attrib.exe. There is an
error reading the file and I can't find the file. However, I do find 2
files titled attrib.exe in the System32 directory, but only 1 has an icon in
the search window.

 

[Dave Patrick]

Natively you can; Start\Settings\Control Panel\Administrative Tools\Computer
Management(Local)\System Information\Software Environment\Startup
Programs|View|Advanced, then in the "Location" column, you'll find the path
to the "Startup" location either in the "Startup" directories or from the
registry's "Run" keys. (note that this window is read-only so you must
manually navigate to the location below to edit or otherwise delete)

%ALLUSERSPROFILE%\Start Menu\Programs\Startup
%USERPROFILE%\Start Menu\Programs\Startup

You can delete the shortcuts that you no longer want to run.


HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

You can delete the string value for the program you no longer want to run.

or copy msconfig from Windows XP to the "windows" directory
or AutoRuns from sysinternals
http://www.sysinternals.com/Utilities/Autoruns.html


--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| The file is already gone. All I have is a reference to the file in the
| registry.

 

[Gary Smith]

Guess it doesn't matter now. I can't find the reference. I also found
another virus that only the anti-virus SW finds, ?attrib.exe. There is an
error reading the file and I can't find the file. However, I do find 2
files titled attrib.exe in the System32 directory, but only 1 has an icon in
the search window.

There should be two identical copies of attrib.exe, on in WINNT\system32
and one in WINNT\system32\dllcache, although it's not a problem if the one
is missing form dllcache. If you have anything else, I'd be suspicious.
If the question mark in ?attrib.exe represents a non-ASCII character, you
may have something bad there. Try searching the entrie drive for "attrib"
without the quotes and see if you can locate it. Make sure that you've
enables the display of hidden files and folders. You can also try this
from the root directory in a command promt window:

dir *attrib* /s

 

[Mike Dobony]

There should be two identical copies of attrib.exe, on in WINNT\system32
and one in WINNT\system32\dllcache, although it's not a problem if the one
is missing form dllcache. If you have anything else, I'd be suspicious.
If the question mark in ?attrib.exe represents a non-ASCII character, you
may have something bad there. Try searching the entrie drive for "attrib"
without the quotes and see if you can locate it. Make sure that you've
enables the display of hidden files and folders. You can also try this
from the root directory in a command promt window:

dir *attrib* /s

Oops, meant ?ttrib.exe. The Antivirus sees this file and I cannot find it.

 

[Gary Smith]

Oops, meant ?ttrib.exe. The Antivirus sees this file and I cannot find it.

If the Antivirus can remove it, let it do so. It can't possibly be
anything you want.

Did you try searching for "ttrib" without the quotes? If that doesn't
tune up anything, you might try Agent Ransack, a file seach program that's
much better than the Windows search function.

 

[Mike Dobony]

it.

If the Antivirus can remove it, let it do so. It can't possibly be
anything you want.

It just has a read error. It is not calling it a virus.

Did you try searching for "ttrib" without the quotes? If that doesn't
tune up anything, you might try Agent Ransack, a file seach program that's
much better than the Windows search function.

Will DL and try it out.

 

[Mike Dobony]

it.

If the Antivirus can remove it, let it do so. It can't possibly be
anything you want.

Did you try searching for "ttrib" without the quotes? If that doesn't
tune up anything, you might try Agent Ransack, a file seach program that's
much better than the Windows search function.

Ransack worked great! Had to Alt-Ctrl-Del to shut the process down first,
but after that it deleted fine! Now I have another utility to load up other
computers : (

 

[Gary Smith]

Ransack worked great! Had to Alt-Ctrl-Del to shut the process down first,
but after that it deleted fine! Now I have another utility to load up other
computers : (

I'm glad you got it worked out. And while it may be a bit of hassle to
install utilities on multiple machines, in cases like this it's worth it.