System32 folder opens at startup

[John]

Hi

When I log into the system, system32 folder automatically opens. This is not
causing any problem but is annoying. Any idea how I can fix this?

Thanks

Regards

 

[Bruce Chambers]

Hi

When I log into the system, system32 folder automatically opens. This is not
causing any problem but is annoying. Any idea how I can fix this?

Thanks

Regards

This can be caused by a blank entry, such as can be left behind by
an incomplete program removal, in the
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and/or
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run keys. It can also
be caused by an entry in these same keys that starts with a " / ."

System32 Folder Opens When Logging on to Windows
http://support.microsoft.com/default.aspx?scid=kb;en-us;170086

How to Troubleshoot By Using the Msconfig Utility in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;310560


--

Bruce Chambers

Help us help you:


http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot

 

[M.I.5¾]

Hi

When I log into the system, system32 folder automatically opens. This is
not
causing any problem but is annoying. Any idea how I can fix this?

Further to the other answer, it can also be caused by a reference in the
start up programs. Click 'start' and click 'run...' and type 'msconfig' in
the dialog box and hit return. In the dialog that opens, select the
'startup' tab. This lists all the applications defined in various locations
that hold startup information.

Now what you are looking for is line that reads "C:\windows\system32\<some
application with a space in it>". The important bit is that you may notice
that some entries are enclosed in quote marks, but the entry that you are
looking for is not. The absence of the quote marks causes the parsing of
the command line to stop at the space. Since the truncated application
obviously doesn't exist, Windows executes as much of the command as it can
which entails opening the folder that should have contained the application.

The cure is to ammend the entry to include the quote marks or delete it
altogether (if you don't actually need it- which may be the case if you
haven't missed it).

 

[John]

The relevant Run registry values are below. Which one needs correcting?

Thanks

Regards


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AtiPTA"="Atiptaxx.exe"
"AuCaption"="DSA OMSA Reminder"
@=" -HideWindow"
"MXOBG"="C:\\WINNT\\MXOALDR.EXE"
"AuFlag"=""
"VxTaskbarMgr"="C:\\Program Files\\VERITAS\\VxUpdate\\VxTaskbarMgr.exe"
"OfficeScanNT Monitor"="\"C:\\Program Files\\Trend Micro\\OfficeScan
Client\\pccntmon.exe\" -HideWindow"
"OBSystemTray"="\"C:\\Program Files\\Connect Total
Recall\\bin\\SystemTray.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"

 

[PaulM]

This is what it saids about systemtray.exe
Not sure if the one running on starup on your system is the same one, but
check it out,

systemtray.exe - Dangerous
--------------------------------------------------------------------------------

systemtray.exe
Systemtray.exe is Trojan/Backdoor Bigfoot.

--
----------------------------------------
www.paulsxp.com
www.paulsxp.com/forum
----------------------------------------

The relevant Run registry values are below. Which one needs correcting?

Thanks

Regards


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AtiPTA"="Atiptaxx.exe"
"AuCaption"="DSA OMSA Reminder"
@=" -HideWindow"
"MXOBG"="C:\\WINNT\\MXOALDR.EXE"
"AuFlag"=""
"VxTaskbarMgr"="C:\\Program Files\\VERITAS\\VxUpdate\\VxTaskbarMgr.exe"
"OfficeScanNT Monitor"="\"C:\\Program Files\\Trend Micro\\OfficeScan
Client\\pccntmon.exe\" -HideWindow"
"OBSystemTray"="\"C:\\Program Files\\Connect Total
Recall\\bin\\SystemTray.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"

Hi

When I log into the system, system32 folder automatically opens. This is
not
causing any problem but is annoying. Any idea how I can fix this?

Thanks

Regards

 

[M.I.5¾]

The relevant Run registry values are below. Which one needs correcting?

Thanks

Regards


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AtiPTA"="Atiptaxx.exe"
"AuCaption"="DSA OMSA Reminder"
@=" -HideWindow"
"MXOBG"="C:\\WINNT\\MXOALDR.EXE"
"AuFlag"=""
"VxTaskbarMgr"="C:\\Program Files\\VERITAS\\VxUpdate\\VxTaskbarMgr.exe"
"OfficeScanNT Monitor"="\"C:\\Program Files\\Trend Micro\\OfficeScan
Client\\pccntmon.exe\" -HideWindow"
"OBSystemTray"="\"C:\\Program Files\\Connect Total
Recall\\bin\\SystemTray.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"

None. But then you only included one of the locations that these are held.

Try posting the contents of:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

which is where I suspect your problem is.

 

[John]

Its empty.

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

Thanks

Regards

The relevant Run registry values are below. Which one needs correcting?

Thanks

Regards


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AtiPTA"="Atiptaxx.exe"
"AuCaption"="DSA OMSA Reminder"
@=" -HideWindow"
"MXOBG"="C:\\WINNT\\MXOALDR.EXE"
"AuFlag"=""
"VxTaskbarMgr"="C:\\Program Files\\VERITAS\\VxUpdate\\VxTaskbarMgr.exe"
"OfficeScanNT Monitor"="\"C:\\Program Files\\Trend Micro\\OfficeScan
Client\\pccntmon.exe\" -HideWindow"
"OBSystemTray"="\"C:\\Program Files\\Connect Total
Recall\\bin\\SystemTray.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"

None. But then you only included one of the locations that these are
held.

Try posting the contents of:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

which is where I suspect your problem is.

 

[M.I.5¾]

Its empty.

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

That is unusual.

OK, post the contents of the Startup tab of msconfig (details in a previous
post).