System32 folder i really need some help on this one

B

b-rad

alright i've tried all the links but they don't seem to
solve this problem. People always ask to post the registry
keys so im hoping that somebody will take some time to
look at it and help me out with what needs to be done.
Thanks.

Current Version Registry Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Run]
"Mozilla Quick Launch"="\"C:\\Program
Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"
@=hex
(2):63,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,5
3,00,5c,00,53,\
00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,00,00
"ClockSync"="C:\\PROGRA~1\\CLOCKS~1\\Sync.exe /q"
"PopUpStopperProfessional"="C:\\PROGRA~1\\PANICW~1\\POP-
UP~1\\PopUpStopperProfessional.exe"
"Iomega Automatic Backup"="C:\\Program
Files\\Iomega\\Iomega Automatic Backup\\ibackup.exe"
"HXIUL.EXE"="C:\\Program
Files\\Alset\\HelpExpress\\default\\HXIUL.EXE"
"HELPEXP.EXE"="C:\\Program
Files\\Alset\\HelpExpress\\default\\Client\\HelpExp.exe"
"emsw.exe"="C:\\WINDOWS\\emsw.exe"
"Mccs"="C:\\Documents and Settings\\default\\Application
Data\\awar.exe"
"WINT"="C:\\WINDOWS\\System32\\wcpsvtr.exe"

Local Machine:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run]
"WINDVDPatch"="CTHELPER.EXE"
"UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
"TPP Auto Loader"="C:\\WINDOWS\\tppaldr.exe"
"TkBellExe"="\"C:\\Program Files\\Common
Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"SystemTray"="SysTray.Exe"
"QuickTime Task"="\"C:\\Program
Files\\QuickTime\\qttask.exe\" -atboottime"
"Microsoft Works Portfolio"="C:\\Program Files\\Microsoft
Works\\WksSb.exe /AllUsers"
"Jet Detection"="C:\\Program
Files\\Creative\\SBAudigy\\PROGRAM\\ADGJDet.exe"
"iTunesHelper"="C:\\Program
Files\\iTunes\\iTunesHelper.exe"
"EPSON Stylus Photo R300 Series"="C:\\WINDOWS\\System32
\\spool\\DRIVERS\\W32X86\\3\\E_S4I2F1.EXE /P30 \"EPSON
Stylus Photo R300 Series\" /O6 \"USB001\" /M \"Stylus
Photo R300\""
"AVG_CC"="C:\\PROGRA~1\\Grisoft\\AVG6
\\avgcc32.exe /STARTUP"
"AutoUpdater"="\"C:\\Program
Files\\AutoUpdate\\AutoUpdate.exe\""
"Each Error"="C:\\PROGRA~1\\STUPID~1\\Pure Dead.exe"
"Internet Optimizer"="\"C:\\Program Files\\Internet
Optimizer\\optimize.exe\""
"lgyqtjka"="C:\\WINDOWS\\System32\\ftbxqhhf.exe"
"cjcjktir"="C:\\WINDOWS\\cjcjktir.exe"
"qlipul"="C:\\WINDOWS\\qlipul.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MSFS]
"Installed"="1"
 
R

Richard Urban

So what's da problem?

--
Regards:

Richard Urban

aka Crusty (-: Old B@stard :)

b-rad said:
alright i've tried all the links but they don't seem to
solve this problem. People always ask to post the registry
keys so im hoping that somebody will take some time to
look at it and help me out with what needs to be done.
Thanks.

Current Version Registry Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Run]
"Mozilla Quick Launch"="\"C:\\Program
Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"
@=hex
(2):63,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,5
3,00,5c,00,53,\
00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,00,00
"ClockSync"="C:\\PROGRA~1\\CLOCKS~1\\Sync.exe /q"
"PopUpStopperProfessional"="C:\\PROGRA~1\\PANICW~1\\POP-
UP~1\\PopUpStopperProfessional.exe"
"Iomega Automatic Backup"="C:\\Program
Files\\Iomega\\Iomega Automatic Backup\\ibackup.exe"
"HXIUL.EXE"="C:\\Program
Files\\Alset\\HelpExpress\\default\\HXIUL.EXE"
"HELPEXP.EXE"="C:\\Program
Files\\Alset\\HelpExpress\\default\\Client\\HelpExp.exe"
"emsw.exe"="C:\\WINDOWS\\emsw.exe"
"Mccs"="C:\\Documents and Settings\\default\\Application
Data\\awar.exe"
"WINT"="C:\\WINDOWS\\System32\\wcpsvtr.exe"

Local Machine:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run]
"WINDVDPatch"="CTHELPER.EXE"
"UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
"TPP Auto Loader"="C:\\WINDOWS\\tppaldr.exe"
"TkBellExe"="\"C:\\Program Files\\Common
Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"SystemTray"="SysTray.Exe"
"QuickTime Task"="\"C:\\Program
Files\\QuickTime\\qttask.exe\" -atboottime"
"Microsoft Works Portfolio"="C:\\Program Files\\Microsoft
Works\\WksSb.exe /AllUsers"
"Jet Detection"="C:\\Program
Files\\Creative\\SBAudigy\\PROGRAM\\ADGJDet.exe"
"iTunesHelper"="C:\\Program
Files\\iTunes\\iTunesHelper.exe"
"EPSON Stylus Photo R300 Series"="C:\\WINDOWS\\System32
\\spool\\DRIVERS\\W32X86\\3\\E_S4I2F1.EXE /P30 \"EPSON
Stylus Photo R300 Series\" /O6 \"USB001\" /M \"Stylus
Photo R300\""
"AVG_CC"="C:\\PROGRA~1\\Grisoft\\AVG6
\\avgcc32.exe /STARTUP"
"AutoUpdater"="\"C:\\Program
Files\\AutoUpdate\\AutoUpdate.exe\""
"Each Error"="C:\\PROGRA~1\\STUPID~1\\Pure Dead.exe"
"Internet Optimizer"="\"C:\\Program Files\\Internet
Optimizer\\optimize.exe\""
"lgyqtjka"="C:\\WINDOWS\\System32\\ftbxqhhf.exe"
"cjcjktir"="C:\\WINDOWS\\cjcjktir.exe"
"qlipul"="C:\\WINDOWS\\qlipul.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MSFS]
"Installed"="1"
Click to expand...
 
G

Guest

the folder pops up when i start the computer
-----Original Message-----
So what's da problem?

--
Regards:

Richard Urban

aka Crusty (-: Old B@stard :)

alright i've tried all the links but they don't seem to
solve this problem. People always ask to post the registry
keys so im hoping that somebody will take some time to
look at it and help me out with what needs to be done.
Thanks.

Current Version Registry Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Run]
"Mozilla Quick Launch"="\"C:\\Program
Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"
@=hex
(2):63,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,5
3,00,5c,00,53,\
00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,00,00
"ClockSync"="C:\\PROGRA~1\\CLOCKS~1\\Sync.exe /q"
"PopUpStopperProfessional"="C:\\PROGRA~1\\PANICW~1\\POP-
UP~1\\PopUpStopperProfessional.exe"
"Iomega Automatic Backup"="C:\\Program
Files\\Iomega\\Iomega Automatic Backup\\ibackup.exe"
"HXIUL.EXE"="C:\\Program
Files\\Alset\\HelpExpress\\default\\HXIUL.EXE"
"HELPEXP.EXE"="C:\\Program
Files\\Alset\\HelpExpress\\default\\Client\\HelpExp.exe"
"emsw.exe"="C:\\WINDOWS\\emsw.exe"
"Mccs"="C:\\Documents and Settings\\default\\Application
Data\\awar.exe"
"WINT"="C:\\WINDOWS\\System32\\wcpsvtr.exe"

Local Machine:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run]
"WINDVDPatch"="CTHELPER.EXE"
"UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
"TPP Auto Loader"="C:\\WINDOWS\\tppaldr.exe"
"TkBellExe"="\"C:\\Program Files\\Common
Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"SystemTray"="SysTray.Exe"
"QuickTime Task"="\"C:\\Program
Files\\QuickTime\\qttask.exe\" -atboottime"
"Microsoft Works Portfolio"="C:\\Program Files\\Microsoft
Works\\WksSb.exe /AllUsers"
"Jet Detection"="C:\\Program
Files\\Creative\\SBAudigy\\PROGRAM\\ADGJDet.exe"
"iTunesHelper"="C:\\Program
Files\\iTunes\\iTunesHelper.exe"
"EPSON Stylus Photo R300 Series"="C:\\WINDOWS\\System32
\\spool\\DRIVERS\\W32X86\\3\\E_S4I2F1.EXE /P30 \"EPSON
Stylus Photo R300 Series\" /O6 \"USB001\" /M \"Stylus
Photo R300\""
"AVG_CC"="C:\\PROGRA~1\\Grisoft\\AVG6
\\avgcc32.exe /STARTUP"
"AutoUpdater"="\"C:\\Program
Files\\AutoUpdate\\AutoUpdate.exe\""
"Each Error"="C:\\PROGRA~1\\STUPID~1\\Pure Dead.exe"
"Internet Optimizer"="\"C:\\Program Files\\Internet
Optimizer\\optimize.exe\""
"lgyqtjka"="C:\\WINDOWS\\System32\\ftbxqhhf.exe"
"cjcjktir"="C:\\WINDOWS\\cjcjktir.exe"
"qlipul"="C:\\WINDOWS\\qlipul.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MSFS]
"Installed"="1"
Click to expand...


.
Click to expand...
 
K

Kelly

Do exactly as the article states as you read: Verify that all the values in
these keys do not contain any incorrect, incomplete, or null entries (such
as "").

Also:

This is a known issue for owners of an SB Audigy 2 sound card. Re-enable
the item in MSConfig.

Then see www.kellys-korner-xp.com/xp_tweaks.htm, Line 260, Left column for a
small utility that will correct this for you. The problem is caused by a
leading space before the /L:ENG. This causes the problem, the script
corrects it.

If this is not the case, see:

System32 Folder Opens When Logging on to Windows
http://support.microsoft.com/?kbid=170086






Richard Urban said:
So what's da problem?

--
Regards:

Richard Urban

aka Crusty (-: Old B@stard :)

b-rad said:
alright i've tried all the links but they don't seem to
solve this problem. People always ask to post the registry
keys so im hoping that somebody will take some time to
look at it and help me out with what needs to be done.
Thanks.

Current Version Registry Key:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio
n\Run]
"Mozilla Quick Launch"="\"C:\\Program
Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"
@=hex
(2):63,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,5
3,00,5c,00,53,\
00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,00,00
"ClockSync"="C:\\PROGRA~1\\CLOCKS~1\\Sync.exe /q"
"PopUpStopperProfessional"="C:\\PROGRA~1\\PANICW~1\\POP-
UP~1\\PopUpStopperProfessional.exe"
"Iomega Automatic Backup"="C:\\Program
Files\\Iomega\\Iomega Automatic Backup\\ibackup.exe"
"HXIUL.EXE"="C:\\Program
Files\\Alset\\HelpExpress\\default\\HXIUL.EXE"
"HELPEXP.EXE"="C:\\Program
Files\\Alset\\HelpExpress\\default\\Client\\HelpExp.exe"
"emsw.exe"="C:\\WINDOWS\\emsw.exe"
"Mccs"="C:\\Documents and Settings\\default\\Application
Data\\awar.exe"
"WINT"="C:\\WINDOWS\\System32\\wcpsvtr.exe"

Local Machine:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run]
"WINDVDPatch"="CTHELPER.EXE"
"UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
"TPP Auto Loader"="C:\\WINDOWS\\tppaldr.exe"
"TkBellExe"="\"C:\\Program Files\\Common
Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"SystemTray"="SysTray.Exe"
"QuickTime Task"="\"C:\\Program
Files\\QuickTime\\qttask.exe\" -atboottime"
"Microsoft Works Portfolio"="C:\\Program Files\\Microsoft
Works\\WksSb.exe /AllUsers"
"Jet Detection"="C:\\Program
Files\\Creative\\SBAudigy\\PROGRAM\\ADGJDet.exe"
"iTunesHelper"="C:\\Program
Files\\iTunes\\iTunesHelper.exe"
"EPSON Stylus Photo R300 Series"="C:\\WINDOWS\\System32
\\spool\\DRIVERS\\W32X86\\3\\E_S4I2F1.EXE /P30 \"EPSON
Stylus Photo R300 Series\" /O6 \"USB001\" /M \"Stylus
Photo R300\""
"AVG_CC"="C:\\PROGRA~1\\Grisoft\\AVG6
\\avgcc32.exe /STARTUP"
"AutoUpdater"="\"C:\\Program
Files\\AutoUpdate\\AutoUpdate.exe\""
"Each Error"="C:\\PROGRA~1\\STUPID~1\\Pure Dead.exe"
"Internet Optimizer"="\"C:\\Program Files\\Internet
Optimizer\\optimize.exe\""
"lgyqtjka"="C:\\WINDOWS\\System32\\ftbxqhhf.exe"
"cjcjktir"="C:\\WINDOWS\\cjcjktir.exe"
"qlipul"="C:\\WINDOWS\\qlipul.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersi
on\Run\OptionalComponents\MSFS]
"Installed"="1"
Click to expand...
Click to expand...
 
R

Rick \Nutcase\ Rogers

Hi,

You have some bugs you need to remove:
"HXIUL.EXE"="C:\\Program Files\\Alset\\HelpExpress\\default\\HXIUL.EXE"
"HELPEXP.EXE"="C:\\Program
Files\\Alset\\HelpExpress\\default\\Client\\HelpExp.exe"
"emsw.exe"="C:\\WINDOWS\\emsw.exe"
Click to expand...

See:
http://www.kephyr.com/spywarescanner/library/helpexpress/index.phtml

Also, these may be infecting files, unless you know them to be otherwise:
"Mccs"="C:\\Documents and Settings\\default\\Application Data\\awar.exe"
"UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
"AutoUpdater"="\"C:\\Program Files\\AutoUpdate\\AutoUpdate.exe\""
"Each Error"="C:\\PROGRA~1\\STUPID~1\\Pure Dead.exe"
Click to expand...

These DEFINITELY are infected files:
"WINT"="C:\\WINDOWS\\System32\\wcpsvtr.exe"
"lgyqtjka"="C:\\WINDOWS\\System32\\ftbxqhhf.exe"
"cjcjktir"="C:\\WINDOWS\\cjcjktir.exe"
"qlipul"="C:\\WINDOWS\\qlipul.exe"
Click to expand...

Adware you should remove:
"Internet Optimizer"="\"C:\\Program Files\\Internet
Optimizer\\optimize.exe\""
Click to expand...

Unnecessary, should be disabled from the startup load unless you actually
want them there:
"Microsoft Works Portfolio"="C:\\Program Files\\Microsoft Works\\WksSb.exe
/AllUsers"
"Mozilla Quick Launch"="\"C:\\Program
Files\\Netscape\\Netscape\\Netscp.exe\" -turbo"
"Iomega Automatic Backup"="C:\\Program Files\\Iomega\\Iomega Automatic
Backup\\ibackup.exe"
"TkBellExe"="\"C:\\Program Files\\Common
Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"QuickTime Task"="\"C:\\Program
Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="C:\\Program Files\\iTunes\\iTunesHelper.exe"
Click to expand...

Once you get this mess cleaned up, you might find that not only is the
system32 folder not showing up at boot, but that the system will run
significantly faster. In addition to updating and running a full system scan
with your AVG software, also download and run adaware6 from www.lavasoft.de

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Windows
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

System 32 folder is poppin' 2
How to prevent Open File - Security Warning window from displaying 1
System 32 Folder (Repost) 1
C:\Program File\Dell folder at Startup ... need eval. 2
Common Files Folder opens at startup 7
WinVir 5
sharedobj.dll errors 1
PLEASE HELp.. i can not get rid of this bug on my computer 2

Top