System32

[Andi Richmond]

I get told everty time i turn my laptop on that system32 cannot be found and i get told to type the file name correctly. I'm not sure why i started getting this message but i think it may have been deleted when deleting a quarantined file containing a viru
s. how do i replace this file witwhout wiping my pc clean and reloading windows?

[Rick \Nutcase\ Rogers]

Hi Andi,

You've not fully cleaned up the mess that the virus made. You need to remove
the references to the file as well as the infecting file itself. These pages
can help:

http://www.kav.ch/avpve/worms/email/mari.stm
http://www.viruslibrary.com/virusinfo/I-Worm.Mari.htm
http://vil.nai.com/vil/content/v_99131.htm
http://www.f-secure.com/v-descs/trojpac.shtml


--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
http://mvp.support.microsoft.com/
Associate Expert - WinXP - Expert Zone
www.microsoft.com/windowsxp/expertzone
Win98 Help - www.rickrogers.org

"Andi Richmond" > wrote in message
...
> I get told everty time i turn my laptop on that system32 cannot be found
and i get told to type the file name correctly. I'm not sure why i started
getting this message but i think it may have been deleted when deleting a
quarantined file containing a virus. how do i replace this file witwhout
wiping my pc clean and reloading windows?

[Bruce Chambers]

Greetings --

Do the error messages specify a "system32.exe" file? I'd strongly
suggest that you invest in and install a good anti-virus program.
System32.exe is _not_ a valid Windows file, but rather a file name
commonly used for a component of several well-known viruses, worms,
and Trojans.

To name a few:

W32.Kwbot.C.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.c.worm.html

W32.Mari.mm


Backdoor.SysXXX
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sysxxx.html

Backdoor.Miranda
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.miranda.html

W32.Kitro.A.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.kitro.a.worm.html

W32.HHLW.Logpole.C
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.logpole.c.html

Backdoor.Darksun
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.darksun.html

W32.Trilisa.mm


Additionally, MS-MVP Doug Knox has kindly scripted a tool that
could help:
http://www.dougknox.com/xp/scripts_desc/xp_clean_kwbot.htm


Bruce Chambers
--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

"Andi Richmond" > wrote in message
...
>I get told everty time i turn my laptop on that system32 cannot be
>found and i get told to type the file name correctly. I'm not sure
>why i started getting this message but i think it may have been
>deleted when deleting a quarantined file containing a virus. how do i
>replace this file witwhout wiping my pc clean and reloading windows?