Login and System32 folder opens

Fahye · 18-June-06, 12:39 AM

Everytime I turn and login on the pc my system32 folder opens and I get a trojan could this be spware trojan or something oping system32 folder and adding a trojan.

Fahye · 18-June-06, 04:31 AM

I scanned my computer and a file called userinit.dll is adaware but I cant get it out and it says it copy protected or so. Would I have to go into safe mode and scan.

Reza · 18-June-06, 06:35 AM

Alot of psyware and anti-virus programs schedule a scan on startup before you load windows if they can't remove it when windows is loaded, try that!

reflux · 18-June-06, 07:10 AM

What software are you using to scan for beasties? I use Ad Aware and Spybot Search and Destroy.

Fahye · 18-June-06, 02:45 PM

Ive been using Spyware Doctor, Spybot Search and Destroy, Adaware, and AVG.

AVG is finding some trojans in System32 and it does move or delet it soI use Spybot Search and Destroy and shred it so does that delet it.

Gzim · 18-June-06, 03:31 PM

Actually, I've seen this before, appearently you HAD a spyware of some sort that lived in sys32, but it was deleted but it still has entries in the registry or any of the many places that trigger start up programs, so that it opens the parent folder looking for the program but not the program...

Gimme a second and I'll tell you where to look in your registry to delete this entry...

Gzim · 18-June-06, 03:34 PM

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

Look for any entry that looks spywarish with either a straight program name on the right or a directory leading to system32 since the entries default to the system32 folder...(hmm, that was only slightly ridiculously hard to follow)

Fahye · 19-June-06, 01:24 AM

Default REG_SZ (value not set)
AVG7_CC REG_SZ F:\PROGRA~1\Grisoft\AVG7\avgcc.exe/STARTUP
HP Software Update REG_SZ C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
MSConfig REG_SZ C:\WINDOWS\PCHeath\HelpCtr\Dinaries\MSConfig.exe/auto
NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask.exe" -atboottime

18-June-06, 12:39 AM		#1 (permalink)
Fahye Apex Master Tech	Login and System32 folder opens Everytime I turn and login on the pc my system32 folder opens and I get a trojan could this be spware trojan or something oping system32 folder and adding a trojan.

18-June-06, 04:31 AM		#2 (permalink)
Fahye Apex Master Tech	Re: Login and System32 folder opens I scanned my computer and a file called userinit.dll is adaware but I cant get it out and it says it copy protected or so. Would I have to go into safe mode and scan.

18-June-06, 06:35 AM		#3 (permalink)
Reza Apex Elite Expert Tech	Re: Login and System32 folder opens Alot of psyware and anti-virus programs schedule a scan on startup before you load windows if they can't remove it when windows is loaded, try that!

18-June-06, 07:10 AM		#4 (permalink)
reflux Sempr0n?	Re: Login and System32 folder opens What software are you using to scan for beasties? I use Ad Aware and Spybot Search and Destroy.

18-June-06, 02:45 PM		#5 (permalink)
Fahye Apex Master Tech	Re: Login and System32 folder opens Ive been using Spyware Doctor, Spybot Search and Destroy, Adaware, and AVG. AVG is finding some trojans in System32 and it does move or delet it soI use Spybot Search and Destroy and shred it so does that delet it.

18-June-06, 03:31 PM		#6 (permalink)
Gzim Da' Jersey Kid	Re: Login and System32 folder opens Actually, I've seen this before, appearently you HAD a spyware of some sort that lived in sys32, but it was deleted but it still has entries in the registry or any of the many places that trigger start up programs, so that it opens the parent folder looking for the program but not the program... Gimme a second and I'll tell you where to look in your registry to delete this entry...

18-June-06, 03:34 PM		#7 (permalink)
Gzim Da' Jersey Kid	Re: Login and System32 folder opens HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run Look for any entry that looks spywarish with either a straight program name on the right or a directory leading to system32 since the entries default to the system32 folder...(hmm, that was only slightly ridiculously hard to follow)

19-June-06, 01:24 AM		#8 (permalink)
Fahye Apex Master Tech	Re: Login and System32 folder opens Default REG_SZ (value not set) AVG7_CC REG_SZ F:\PROGRA~1\Grisoft\AVG7\avgcc.exe/STARTUP HP Software Update REG_SZ C:\Program Files\HP\HP Software Update\HPWuSchd2.exe MSConfig REG_SZ C:\WINDOWS\PCHeath\HelpCtr\Dinaries\MSConfig.exe/auto NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask.exe" -atboottime

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Login Problems	angry@PC	Other PC Problem / Help	1	10-September-06 09:42 PM
system32 directory open on startup?	WDoG	Windows OS Problems	2	03-July-06 08:20 PM
login issues	largo	Windows OS Problems	7	11-June-06 03:12 PM
XP Pro Login problems	ariesjj	Windows OS Problems	14	29-November-05 04:39 PM
XP Login change	jhoop2002	General OS Tweaks	11	13-February-03 11:47 PM