T
Tom Luddecke
When Windows loads the startup programs it also opens the
system 32 file on my desktop. How can I prevent this
from happening
system 32 file on my desktop. How can I prevent this
from happening
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
R
Rick \Nutcase\ Rogers
Hi Tom,
Please see:
System32 Folder Opens When Logging on to Windows
http://support.microsoft.com/?kbid=170086
Also, start/run msconfig, and see if there is a line that loads /L:ENG. If
so, disable it. It comes from a SoundBlaster Audigy driver, but should not
affect that hardware. You can also repair the registry entry if you like by
removing the leading space in the string that loads it.
However, it can also be caused by other incorrectly built registry strings.
Could you please export and post the contents of these keys in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
To do this, start/run regedit, expand the branches to each key (do this one
at a time). Click on the key, then on file/export. Give it any name, then
save to the desktop. Once you have saved both keys, close the registry
editor. Right-click one of the saved files on the desktop, choose edit, it
should open in notepad. Click edit/select all/edit/copy. Open a response to
this post and click in the message text area. Hit ctrl+v to paste the
contents. Repeat for the other saved key, then send the post for
examination.
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
Please see:
System32 Folder Opens When Logging on to Windows
http://support.microsoft.com/?kbid=170086
Also, start/run msconfig, and see if there is a line that loads /L:ENG. If
so, disable it. It comes from a SoundBlaster Audigy driver, but should not
affect that hardware. You can also repair the registry entry if you like by
removing the leading space in the string that loads it.
However, it can also be caused by other incorrectly built registry strings.
Could you please export and post the contents of these keys in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
To do this, start/run regedit, expand the branches to each key (do this one
at a time). Click on the key, then on file/export. Give it any name, then
save to the desktop. Once you have saved both keys, close the registry
editor. Right-click one of the saved files on the desktop, choose edit, it
should open in notepad. Click edit/select all/edit/copy. Open a response to
this post and click in the message text area. Hit ctrl+v to paste the
contents. Repeat for the other saved key, then send the post for
examination.
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
B
Bruce Chambers
Greetings --
This can be caused by a blank entry, such as can be left behind by
an incomplete program removal, in the
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and/or
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run keys. It can also
be caused by an entry in these same keys that starts with a " / ."
System32 Folder Opens When Logging on to Windows
http://support.microsoft.com/default.aspx?scid=kb;en-us;170086
How to Troubleshoot By Using the Msconfig Utility in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;310560
Bruce Chambers
--
Help us help you:
You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
This can be caused by a blank entry, such as can be left behind by
an incomplete program removal, in the
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and/or
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run keys. It can also
be caused by an entry in these same keys that starts with a " / ."
System32 Folder Opens When Logging on to Windows
http://support.microsoft.com/default.aspx?scid=kb;en-us;170086
How to Troubleshoot By Using the Msconfig Utility in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;310560
Bruce Chambers
--
Help us help you:
You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
G
Guest
Here are the files:-----Original Message-----
When Windows loads the startup programs it also opens the
system 32 file on my desktop. How can I prevent this
from happening
.
Rick,
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run]
"KeyMaestro"="C:\\KMaestro\\KMaestro.exe"
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"ashMaiSv"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashmaisv.exe"
"xkdefwss"="C:\\WINDOWS\\scxykslo.exe"
"Openwares LiveUpdate"="C:\\Program
Files\\LiveUpdate\\LiveUpdate.exe"
"nvid"="C:\\WINDOWS\\System32\\uepqnfzf.exe"
"BJPD HID Control"="C:\\Program
Files\\Canon\\BJPV\\TVMon.exe"
"BJLaunchEXE"="C:\\Program
Files\\Canon\\BJCard\\BJLaunch.exe"
"zzb"=hex
(2):63,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,
53,00,5c,00,\
53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,7a,0
0,7a,00,62,00,2e,\
00,65,00,78,00,65,00,00,00
"MSConfig"="C:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\MSCo
nfig.exe /auto"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run\KeyMaestro]
"FirstRun"=dword:00000001
"RepeatFlag"=dword:00000000
"PowerEnable"=dword:00000001
"BTCplayEnable"=dword:00000001
"MsPlayEnable"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run\OptionalComponents\MSFS]
"Installed"="1"
and the second one:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi
on\Run]
"AIM"="C:\\PROGRA~1\\AIM\\aim.exe -cnetwait.odl"
"MoneyAgent"="\"C:\\Program Files\\Microsoft
Money\\System\\Money Express.exe\""
"zzb"=hex
(2):63,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,
53,00,5c,00,\
53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,7a,0
0,7a,00,62,00,2e,\
00,65,00,78,00,65,00,00,00
I did uncheck reference to System 32 in the startup area
of msconfig.
R
Rick \Nutcase\ Rogers
Hi,
Two major problems:
These are both Trojans (viruses). Restart in Safe mode by hitting F8 as the
system boots, logon as administrator. Search for and delete the two
referenced files. Then run regedit and delete those two strings. Restart
normally. See if this helps first.
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
<snip>
Two major problems:
"xkdefwss"="C:\\WINDOWS\\scxykslo.exe"
"nvid"="C:\\WINDOWS\\System32\\uepqnfzf.exe"
These are both Trojans (viruses). Restart in Safe mode by hitting F8 as the
system boots, logon as administrator. Search for and delete the two
referenced files. Then run regedit and delete those two strings. Restart
normally. See if this helps first.
--
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
Associate Expert - WinXP - Expert Zone
<snip>
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.