Printable View
http://atthebegining.hypermart.net/images/sys32.jpg
What is it, and how can I get rid of this message every time I boot up my comp? System32.exe used to be Backdoor.Sdbot, but I remvoed it, and now this is what's left behind! Not really a threat, but its annoying.
I'd install windows again not format Your HD.
BOT
It could be that you start from a bootlogtekst?
Look at the settings in your bios ,if problems remain start in safe mode
and do systemrestore (I assume that's XP you're showing)
Could you explain your instructions? I don't quite understand...Quote:
Originally posted by ToraBoraDweller@9 May 2003 - 14:47
It could be that you start from a bootlogtekst?
Look at the settings in your bios ,if problems remain start in safe mode
and do systemrestore (I assume that's XP you're showing)
So you're saying you had a virus and you removed it? It sounds like it added itself to your boot path (to make sure the backdoor was open whenever you were logged on). You just need to figure out where it's trying to load from. Start by running msconfig, and look at your Startup list. If this line is in there, uncheck it. If not, look for it in your Autoexec.bat and Config.sys files. If it's not in those, run Regedit and go to Edit - Find and do a search for system32.exe. If you find a key with that in it, delete it (make sure you've backed-up your registry first).
When you boot up you have several options under your functionkeys (F1,F2 etc)
one of those options (depends on type of bios) is to boot from instructions
capped in a textfile (bootlog/bootlogtext).
There could be an invalid instruction there.
If the file system32.exe itself is corrupted you have to repair it by replacing the original'
in that case try a systemrestore 1st (boot from safe mode).
If even that doesn't work then you can try repair from install-cd.
btw do you have repairdisks (like Norton utilities)?
it wasnt in the startup, but I did find it in the registry, using the "find" method.Quote:
Originally posted by Nightwolf^.`.^@9 May 2003 - 15:17
So you're saying you had a virus and you removed it? It sounds like it added itself to your boot path (to make sure the backdoor was open whenever you were logged on). You just need to figure out where it's trying to load from. Start by running msconfig, and look at your Startup list. If this line is in there, uncheck it. If not, look for it in your Autoexec.bat and Config.sys files. If it's not in those, run Regedit and go to Edit - Find and do a search for system32.exe. If you find a key with that in it, delete it (make sure you've backed-up your registry first).
Thanks for your help everyone. Problem solved. :)