System32 Folder opens on startup with Windows XP

  • Thread starter Thread starter George
  • Start date Start date
G

George

When I boot up the System32 folder opens on the startup.
When I ran Norton it found a virus Trojan.Benuti which
pointed to a file wotypw.exe in the System 32 folder.
Norton has not been able to correct this and I am unable
to delete the wotypw.exe file. When I touch the file with
my cursor, the Norton virus checker immediately tells me
this is a virus file. Help!!!
 
Hi,

Start/run regedit, navigate to this key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Look for a string in the right-pane that references that file and delete it.
Close the registry editor. Hit ctrl+shift+escape and check the processes tab
for wotypw.exe. End task on it, then reboot the system. See if this resolves
the problem.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
For the virus file, open Task Manager (Start, Run and enter TASKMGR.EXE)
Locate the process with the same name as the virus file, highlight it and
click End Process. Then you should be able to delete the file, or let
Norton delete it.

In addition to the Registry entry that Rick gave, check the same key, except
in HKEY_LOCAL_MACHINE, instead of HKEY_CURRENT_USER
 
I've got the same thing happening. Using Windows XP Home
Edition, have five profiles, only one of which has admin
priv., When any of the five users login, the
windows/system32 folder opens. Ran McAfee Virus scan and
found several dll & exe's in the folder that are potenial
adware/spyware apps. Adware IALink and Adware IAGold.
Get rid of them.
 
Hi

I have the same problem when I get the to desktop after WindowsXP (French Family Edition) has booted, the System32 folder opens or wants to open, as I get a warning that this file should not be opened. I just close the warning message and everything seems to be fine. It's annoying and I would like to find a solution.

I searched my HD for the wotypw.exe file and it can't be found, so I guess that my particular problem is not related to this issue. Does anybody else have the same problem? Does anybody know of a fix

J

----- Doug Knox MS-MVP wrote: ----

For the virus file, open Task Manager (Start, Run and enter TASKMGR.EXE
Locate the process with the same name as the virus file, highlight it an
click End Process. Then you should be able to delete the file, or le
Norton delete it

In addition to the Registry entry that Rick gave, check the same key, excep
in HKEY_LOCAL_MACHINE, instead of HKEY_CURRENT_USE
 
I ran the "Spybot Search and Destroy" utility (which is just great) and my system is adware or spyware free! Thanks anyway for the suggestion. Still have the problem though

JL
 
Back
Top