C:\Windows\System 32 folder opens on boot up

Discussion in 'Software' started by Bubba12345, Apr 10, 2007.

  1. Bubba12345

    Bubba12345 Private E-2

    I misposted this I think. It should go here rater than in malware, so...

    I read some of the other posts on this and have run the scans to get started but I can't seem to get this one undone. Problem is that C:\WINDOWS\system32 opens every time I reboot my wife's laptop. Here are the scans as requested before posting in the guide. logs are posted under malware thread already. I appreciate any help in solving this one.

    Set msconfig to normal
    Ran CCleaner and Spybot--current levels
    Counterspy-had to run it in normal mode
    Ran bitdefender in normal-unable in safe mode
    Ran Pandascan active, get runkey and shownew
    Ran HJT and saved log


    Chaslang responded and I have tried what he suggested--no success yet-Here's what he suggested :

    Problems with the system32 folder opening at startup are not malware problems. It is normally due to an improperly terminated startup registry key. You appear to have had Yahoo Pager (and other Yahoo software) installed at one time, but now uninstalled it. The problem is that it did not uninstall properly. The below may just take care of your problem.


    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O4 - HKCU\..\Run: [Yahoo! Pager] -quiet
    O4 - Startup: PowerReg SchedulerV2.exe

    After clicking Fix, exit HJT.

    Also you need to uninstall Viewpoint Media Player as requested in step 0 of the READ ME.--

    Done
    I did this and rebooted and the folder came up again

    More suggestions? If I run the script detector vbs program, it says that the script's not found? Anybody else? I'll post a new HJT log shortly....

    Thanks,

    Adam
     
  2. Bubba12345

    Bubba12345 Private E-2

    Here's a current HJT log
     

    Attached Files:

  3. Matacumbie

    Matacumbie Rocky Top

    Go to the link below and scroll down to # 260 on the right-hand side (Fix System32 Folder Opens Upon Boot)

    http://www.kellys-korner-xp.com/xp_tweaks.htm


    To use the VBS Files: Download .vbs file and save it to your hard drive (you may want to right click and use Save Target As). Double
    click the vbs file. You will be prompted when the script is done.

    Steve
     
  4. Bubba12345

    Bubba12345 Private E-2

    Been there and tried that--no script found. I guess this is registry related from what I have read--any expert know how to clean one doing this?
    Do I need to post something else as far as a log to be helpful?
     
  5. Matacumbie

    Matacumbie Rocky Top


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds