system32 files duplicating & relocating

[Guest]

This morning I booted up, went to My Docs and found about 100 system32 files
in there. I verified that the originals were still intact in the sys32
folder, and the ones in My Docs were dupes. Also in the sys32 folder about
midwat through the ones that were duplicated are 55 NLS files with file names
beginning with c then an underscore and then a number. like this c_28598.

I've scanned with AVG, Housecall, Symantec online scan, AdAware, Spybot S&D,
HijackThis, CWShredder. All updated, all showing nothing. This was installed
fresh Saturday.

 

[Doug Knox MS-MVP]

NLS files are normal.

http://filext.com/detaillist.php?extdetail=NLS

As for the others, its possible that you inadvertenly dragged and dropped files from the System32 folder to your my documents folder. In that event, XP's Windows File Protection would have automatically restored them from the DLLCACHE folder in Windows\System32.

 

[Rich Barry]

You can take a look at some of the possibilites that Google came up
with.
http://www.google.com/search?hl=en&lr=&q=c_28598.nls&btnG=Search

 

[Guest]

Even if i inadvertently dragged some files, I don't see how I could have
dragged the ones before, and the ones after the NLS files, without moving
them. Anyway, I'm going to just put this one down as the ghost in the
machine. Could you tell me what the NLS files are for? I've just never
noticed them, I guess. If they are regular sys files.

 

[Doug Knox MS-MVP]

The link I included in my original reply gave quite a bit of information on NLS files. They are Code Page National Language Support files. They allow different keyboards, character sets and etc. for different languages/regions.

http://filext.com/detaillist.php?extdetail=NLS

 

[Guest]

Thank you! I missed that the first time. I ran BootVis last night, which I
forgot about. I suspect I may have a sketchy or corrupted download. Although
I did only run the boot trace, and not the optimizer. Anyway, it doesn't seem
to have adversely affected the system, so I'm thinking I'll just put it to
rest and chalk it up to the ghost in the machine. Thanks again for the help