PDA

View Full Version : Cannot find C:\Windows\System32\System32.exe


JR
May 7th 04, 08:41 AM
"Cannot find C:\Windows\System32\System32.exe"

I'm getting this message when I start up. I tried to
follow the instructions on the microsoft website, but
when I bring up "run" and type in "regedit" the entire
window shuts down so that I cant even attemp to fix this
problem. I read that this message occurs because of an
incomplete removal of a bot virus. Can someone help?

Thanks,
JR

Will Denny
May 7th 04, 09:42 AM
Hi JR

That file is part of a worm. Have a look at the following link:



--

Will Denny
MS-MVP Windows - Shell/User


"JR" > wrote in message
...
| "Cannot find C:\Windows\System32\System32.exe"
|
| I'm getting this message when I start up. I tried to
| follow the instructions on the microsoft website, but
| when I bring up "run" and type in "regedit" the entire
| window shuts down so that I cant even attemp to fix this
| problem. I read that this message occurs because of an
| incomplete removal of a bot virus. Can someone help?
|
| Thanks,
| JR

Bruce Chambers
May 8th 04, 04:41 AM
Greetings --

System32.exe is _not_ a valid Windows file, but rather a file name
commonly used for a component of several well-known viruses, worms,
and Trojans.

To name a few:

W32.Kwbot.C.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.kwbot.c.worm.html

W32.Mari.mm


Backdoor.SysXXX
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sysxxx.html

Backdoor.Miranda
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.miranda.html

W32.Kitro.A.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.kitro.a.worm.html

W32.HHLW.Logpole.C
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.logpole.c.html

Backdoor.Darksun
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.darksun.html

W32.Trilisa.mm


Additionally, MS-MVP Doug Knox has kindly scripted a tool that
could help:
http://www.dougknox.com/xp/scripts_desc/xp_clean_kwbot.htm


Bruce Chambers

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html


You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH


"JR" > wrote in message
...
> "Cannot find C:\Windows\System32\System32.exe"
>
> I'm getting this message when I start up. I tried to
> follow the instructions on the microsoft website, but
> when I bring up "run" and type in "regedit" the entire
> window shuts down so that I cant even attemp to fix this
> problem. I read that this message occurs because of an
> incomplete removal of a bot virus. Can someone help?
>
> Thanks,
> JR

Google