system32.exe

[Ron]

When I start up my computer I get this box that pops up
which says, "Windows cannot find 'C:\WINDOWS\System32
\System32.exe'. Make sure you typed the name correctly,
and then try again. To search for a file, click the Start
button, and then click Search."

It doesn't seem to affect the computer that I don't have
this file but I'm wondering what it is and if I ought to
have it. Finally, would there be a way of reinstalling
this file without erasing my C drive?

Thanks,

Ron

 

[Kelly]

You don't want it back, Ron.

system32.exe is a process which is registered as the TROJ_SUA.A Trojan. This
Trojan allows attackers to access your computer, stealing passwords and
personal data. It is a registered security risk and should be removed
immediately. Please see additional details regarding this process

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sysxxx.html

 

[Bruce Chambers]

When I start up my computer I get this box that pops up
which says, "Windows cannot find 'C:\WINDOWS\System32
\System32.exe'. Make sure you typed the name correctly,
and then try again. To search for a file, click the Start
button, and then click Search."

It doesn't seem to affect the computer that I don't have
this file but I'm wondering what it is and if I ought to
have it. Finally, would there be a way of reinstalling
this file without erasing my C drive?

Thanks,

Ron

System32.exe is _not_ a valid Windows file, but rather a file name
commonly used for a component of several well-known viruses, worms,
and Trojans.

To name a few:

W32.Kwbot.C.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.c.worm.html

W32.Mari.mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Backdoor.SysXXX
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sysxxx.html

Backdoor.Miranda
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.miranda.html

W32.Kitro.A.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.kitro.a.worm.html

W32.HHLW.Logpole.C
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.logpole.c.html

Backdoor.Darksun
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.darksun.html

W32.Trilisa.mm
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Additionally, MS-MVP Doug Knox has kindly scripted a tool that
could help:
http://www.dougknox.com/xp/scripts_desc/xp_clean_kwbot.htm

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having
both at once. - RAH