System32 Folder

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Dear Reader,

This is a very quick enquiry but its a problem that has me totally stumped
and I'd be very grateful for any help with it!

I have a computer with Windows XP Professional on it and at Windows startup
it has, rather suddenly, begun to produce an explorer window showing the
contents of the System32 folder.

I have no idea why this is as I never interfere with the contents of that
folder. I have used my updated virus scanner and spyware software to check
for undesired programs changing the computer's settings and this has made no
difference. I have furthered tried changing the 'msconfig' settings to
prevent this happening at startup and, again, this has made no difference.
Furthermore, the folder does not appear in the 'Startup' menu in 'All
Programs' on the 'Start' menu.

I have no idea how to stop System32 from openning at the windows startup so
if anyone could offer some advice on this matter I would be most grateful.

Thanking you in advance,

Karim434
 
This article may help you.

System32 Folder Opens When Logging into Windows NT
http://support.microsoft.com/default.aspx?scid=KB;en-us;q170086

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

| Dear Reader,
|
| This is a very quick enquiry but its a problem that has me totally stumped
| and I'd be very grateful for any help with it!
|
| I have a computer with Windows XP Professional on it and at Windows
startup
| it has, rather suddenly, begun to produce an explorer window showing the
| contents of the System32 folder.
|
| I have no idea why this is as I never interfere with the contents of that
| folder. I have used my updated virus scanner and spyware software to check
| for undesired programs changing the computer's settings and this has made
no
| difference. I have furthered tried changing the 'msconfig' settings to
| prevent this happening at startup and, again, this has made no difference.
| Furthermore, the folder does not appear in the 'Startup' menu in 'All
| Programs' on the 'Start' menu.
|
| I have no idea how to stop System32 from openning at the windows startup
so
| if anyone could offer some advice on this matter I would be most grateful.
|
| Thanking you in advance,
|
| Karim434
 
See this.

How to generate a startup log using MSINFO32
http://www.winxptutor.com/msinfo32.htm

Post back with the contents of startuplog.txt pasted into a message and
someone will try to spot the errant entry.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Not sure what you would suggest doing next but I'm afraid the resultant text
file was far too large to fit into this reply.

I have followed the instructions in that link and saved the text file but
I'm not sure how to get it to you. Any thoughts?

Thanking you in advance,

Karim434
 
There's no need to continue the multi-post. You can abandon the other
thread. I don't know what you were trying but;

Start|Run|msinfo32.exe then navigate to System Summary\Software
Environment\Startup Programs then Edit|Select All|Edit|Copy then paste in
the body of a reply message.


--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Not sure what you would suggest doing next but I'm afraid the resultant
text
| file was far too large to fit into this reply.
|
| I have followed the instructions in that link and saved the text file but
| I'm not sure how to get it to you. Any thoughts?
|
| Thanking you in advance,
|
| Karim434
 
I hope this helps. Thanks awfully for the assistance...

-------------------------------------

CTFMON.EXE c:\windows\system32\ctfmon.exe NT
AUTHORITY\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe HKU\S-1-5-21-330784629-399117050-176895030-33525\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe HKU\S-1-5-21-330784629-399117050-176895030-33526\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe HKU\S-1-5-21-330784629-399117050-176895030-34981\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE c:\windows\system32\ctfmon.exe .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSMSGS "c:\program files\messenger\msmsgs.exe" /background NT
AUTHORITY\SYSTEM HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSMSGS "c:\program files\messenger\msmsgs.exe"
/background HKU\S-1-5-21-330784629-399117050-176895030-33525\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MSMSGS "c:\program files\messenger\msmsgs.exe"
/background .DEFAULT HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
McAfeeUpdaterUI "c:\program files\network associates\common
framework\updaterui.exe" /startedfromrunkey All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ShStatEXE "c:\program files\network associates\virusscan\shstat.exe"
/standalone All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ctfmon.exe c:\windows\system32\ctfmon.exe CCNT\WImms HKU\S-1-5-21-330784629-399117050-176895030-34984\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
desktop desktop.ini NT AUTHORITY\SYSTEM Startup
desktop desktop.ini Startup
desktop desktop.ini Startup
desktop desktop.ini Startup
desktop desktop.ini CCNT\WImms Startup
desktop desktop.ini .DEFAULT Startup
desktop desktop.ini All Users Common Startup
gcasServ "c:\program files\microsoft antispyware\gcasserv.exe" All
Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
 
Seems odd that you're running five instances of ctfmon.exe and three
instances of msmsgs.exe There may be a profile corruption issue here. What
happens if you logon as a new user? (create a new account in 'User
Accounts')

http://support.microsoft.com/?kbid=282599

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
|I hope this helps. Thanks awfully for the assistance...
|
| -------------------------------------
|
| CTFMON.EXE c:\windows\system32\ctfmon.exe NT
| AUTHORITY\SYSTEM
HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| CTFMON.EXE c:\windows\system32\ctfmon.exe
HKU\S-1-5-21-330784629-399117050-176895030-33525\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| CTFMON.EXE c:\windows\system32\ctfmon.exe
HKU\S-1-5-21-330784629-399117050-176895030-33526\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| CTFMON.EXE c:\windows\system32\ctfmon.exe
HKU\S-1-5-21-330784629-399117050-176895030-34981\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| CTFMON.EXE c:\windows\system32\ctfmon.exe .DEFAULT
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| MSMSGS "c:\program files\messenger\msmsgs.exe" /background NT
| AUTHORITY\SYSTEM
HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| MSMSGS "c:\program files\messenger\msmsgs.exe"
| /background
HKU\S-1-5-21-330784629-399117050-176895030-33525\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| MSMSGS "c:\program files\messenger\msmsgs.exe"
| /background .DEFAULT
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| McAfeeUpdaterUI "c:\program files\network associates\common
| framework\updaterui.exe" /startedfromrunkey All
| Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| ShStatEXE "c:\program files\network associates\virusscan\shstat.exe"
| /standalone All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| ctfmon.exe c:\windows\system32\ctfmon.exe CCNT\WImms
HKU\S-1-5-21-330784629-399117050-176895030-34984\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| desktop desktop.ini NT AUTHORITY\SYSTEM Startup
| desktop desktop.ini Startup
| desktop desktop.ini Startup
| desktop desktop.ini Startup
| desktop desktop.ini CCNT\WImms Startup
| desktop desktop.ini .DEFAULT Startup
| desktop desktop.ini All Users Common Startup
| gcasServ "c:\program files\microsoft antispyware\gcasserv.exe" All
| Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
|
 
Now that is very peculiar. I created a new user (non-administrator) account
and logged into it, once after logging out of my normal account and once at
the very startup. Having done that I restarted the computer, logged into my
original account and now find that the System32 folder does not open at
startup.

I shall try this again later to see if the issue reoccurs but, for the
moment, the problem appears to have mystically vanished.

Thanks awfully for your help there,

Karim434
 
That is odd.... but glad to hear it's sorted.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Now that is very peculiar. I created a new user (non-administrator)
account
| and logged into it, once after logging out of my normal account and once
at
| the very startup. Having done that I restarted the computer, logged into
my
| original account and now find that the System32 folder does not open at
| startup.
|
| I shall try this again later to see if the issue reoccurs but, for the
| moment, the problem appears to have mystically vanished.
|
| Thanks awfully for your help there,
|
| Karim434
 
Back
Top