System 32 pop up's

[Bob C]

When I start Windows XP the system 32 folder pops up. I
have gone to Kellys Korner and downloaded #260 but I get
the message "the script cannot repair your issue, the
expected registy value was not found." I have also
printed 170086 from Microsoft and followed the
instructions and have gone into the registry and looked
at these values but really don't know what to look for.
Can you help me.
Thanks,
Bob

 

[Rick \Nutcase\ Rogers]

Hi Bob,

This can be caused by leftovers from cleaning up spyware as well. Try this:

Control Panel/Folder Options/View tab, uncheck the line "restore previous
folder windows at logon". Click apply/ok, do not reboot yet.

Start/run msconfig, on the general tab select the diagnostic mode. Click
apply/ok and reboot at prompted.

The folder should not show up now. Rerun msconfig, put the system back in
normal mode. Click apply/ok and reboot once more. Does this help?

For most users, this will resolve the issue. For some that still have
registry damage it will not. If this is the case, could you please export
and post the contents of these keys in the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

To do this, start/run regedit, expand the branches to each key (do this one
at a time). Click on the key, then on file/export. Give it any name, then
save to the desktop. Once you have saved both keys, close the registry
editor. Right-click one of the saved files on the desktop, choose edit, it
should open in notepad. Click edit/select all/edit/copy. Open a response to
this post and click in the message text area. Hit ctrl+v to paste the
contents. Repeat for the other saved key, then send the post for
examination.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Windows
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Bob C]

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersi
on\Run]
"Weather"="C:\\Program
Files\\AWS\\WeatherBug\\Weather.exe 1"
"OfotoNow USB Detection"="C:\\WINDOWS\\System32
\\RunDLL32.exe C:\\PROGRA~1
\\Ofoto\\OfotoNow\\OFUSBS.DLL,WatchForConnection OfotoNow"
"MSMSGS"="\"C:\\Program
Files\\Messenger\\msmsgs.exe\" /background"
"MoneyAgent"="\"C:\\Program Files\\Microsoft
Money\\System\\Money Express.exe\""




Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run]
"zzb"="c:\\WINDOWS\\System32\\zzb.exe"
"x"="C:\\WINDOWS\\System32\\qxfszh.exe"
"WorksFUD"="C:\\Program Files\\Microsoft Works\\wkfud.exe"
"WinFavorites"="c:\\program
files\\winfavorites\\WinFavorites.exe1"
"vih"="C:\\WINDOWS\\vih.exe"
"ViewMgr"="C:\\Program Files\\Viewpoint\\Viewpoint
Manager\\ViewMgr.exe"
"updater"="C:\\Program Files\\Common
files\\updater\\wupdater.exe"
"SystemTray"="SysTray.Exe"
"SafeSurfingUpdate"="C:\\WINDOWS\\System32\\SSUpdate.exe"
"RunDLL"="rundll32.exe \"C:\\WINDOWS\\System32
\\bridge.dll\",Load"
"REGSHAVE"="C:\\Program
Files\\REGSHAVE\\REGSHAVE.EXE /AUTORUN"
"RealTray"="C:\\Program
Files\\Real\\RealPlayer\\RealPlay.exe
SYSTEMBOOTHIDEPLAYER"
"QuickTime Task"="\"C:\\Program
Files\\QuickTime\\qttask.exe\" -atboottime"
"p"="C:\\WINDOWS\\System32\\gahuen.exe"
"ndvtlvpp"="C:\\WINDOWS\\pxiodxtc.exe"
"mswspl"="C:\\Program Files\\Common
files\\updater\\wupdater.exe"
"Microsoft Works Portfolio"="C:\\Program Files\\Microsoft
Works\\WksSb.exe /AllUsers"
"Internet Optimizer"="\"C:\\Program Files\\Internet
Optimizer\\optimize.exe\""
"Ink Monitor"="C:\\Program Files\\EPSON\\Ink
Monitor\\InkMonitor.exe"
"Belt"="C:\\WINDOWS\\Belt.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run\OptionalComponents\MSFS]
"Installed"="1"

 

[Alex Nichol]

Bob C wrote:

"RunDLL"="rundll32.exe \"C:\\WINDOWS\\System32
\\bridge.dll\",Load"

is I think the source of the trouble. Bridge.dll is a spyware file,
that has probably got deleted, thus leaving this entry in the air.
Delete the line