System 32 file folder

[Cynthia]

the system 32 file folder shows up every time i start the
computer. it started doing this after i removed a virus.
how do i make it stop??

 

[Gary Tsang]

Visit http://www.kellys-korner-xp.com/xp_tweaks.htm and scroll down
to Item No. 260. In the right column, click on "System32 Folder Opens
Upon Boot". Download this repair file and then run the repair.

[Courtesy of MS-MVP Kelly Theriot]


System32 Folder Opens When Logging on to Windows
http://support.microsoft.com/?kbid=170086

 

[Kelly]

Are you sure, if so which virus and which cleaner did you use? In the
meantime, see if this applies:

This is a known issue for owners of an SB Audigy 2 sound card. Re-enable
the item in MSConfig.

Then see www.kellys-korner-xp.com/xp_tweaks.htm, Line 260, Left column for a
small utility that will correct this for you. The problem is caused by a
leading space before the /L:ENG. This causes the problem, the script
corrects it.

If this is not the case, see:

System32 Folder Opens When Logging on to Windows
http://support.microsoft.com/?kbid=170086

Verify that all the values in these keys do not contain any incorrect,
incomplete, or null entries (such as ""). These values can be checked here:
Start/Run/Regedit

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

 

[Kelly]

Thanks, Gary. BTW, where is that replacement picture? <w>

Visit http://www.kellys-korner-xp.com/xp_tweaks.htm and scroll down
to Item No. 260. In the right column, click on "System32 Folder Opens
Upon Boot". Download this repair file and then run the repair.

[Courtesy of MS-MVP Kelly Theriot]


System32 Folder Opens When Logging on to Windows
http://support.microsoft.com/?kbid=170086


--
Gary Tsang
Microsoft MVP - Windows XP Shell/User
http://www.microsoft.com/mvp

the system 32 file folder shows up every time i start the
computer. it started doing this after i removed a virus.
how do i make it stop??

 

[Guest]

oh geez. i believe the virus was dluca.e. i removed it
successfully. but i may have deleted something essential
to the registry in the process. norton anti-virus said
the virus resided in c:/winnt/system32/wdwctrl.exe.
i think i deleted anything that said system 32. what do i
do now?
i went to the tweak site you mentioned, but when i run
it, it says that it cannot find the value in the registry.

 

[Kelly]

No problem, it only means that you don't have that card installed. Looking
over the remover for Dialer.GMsoft, I don't see how this would come into
play at all.

This seems to be something you added later that isn't properly enclosed
within quotes that contains a space. To verify you will need to check
Start/Run/Msconfig/Startup or Start/Run/Msinfo32 or your runkeys.

I would suggest following the procedure again, thoroughly:
http://securityresponse.symantec.com/avcenter/venc/data/dialer.gmsoft.html

And or, running:

Free Online Virus Scan
http://housecall.trendmicro.com/housecall/start_corp.asp

From there, run the Startup Tracker found here and post the logfile, minus
the Services.
http://www.kellys-korner-xp.com/xp_u.htm#xp_util




oh geez. i believe the virus was dluca.e. i removed it
successfully. but i may have deleted something essential
to the registry in the process. norton anti-virus said
the virus resided in c:/winnt/system32/wdwctrl.exe.
i think i deleted anything that said system 32. what do i
do now?
i went to the tweak site you mentioned, but when i run
it, it says that it cannot find the value in the registry.