Re: Unable to open System Folder

From: Walter Clayton (w-claytonNO_at_SPmvps.AMorg)
Date: 02/15/05 

Date: Tue, 15 Feb 2005 11:20:34 -0500

This is puzzling. BTW: the references to the files in the system volume
structure are part of system restore. You can ignore those.

What was the source of the "system recovery" data since you don't have the
OEM CD?

Things are pointing to either an active malware/crapware intrusion or some
damage in the registry. Go to http://www.majorgeeks.com/download3155.html
and grab HiJackThis. Copy it to it's own directory. *DO NOT* copy into the
temp directory structure. Be explicit about where you copy it and unpack it.
Launch it, run a report and copy and paste the results back here. *DO NOT*
take any corrective action until advised to do so by some one that
understands what they're looking at. 

-- 
Walter Clayton
Any technology distinguishable from magic is insufficiently advanced.
"Tina" <Tina@discussions.microsoft.com> wrote in message 
news:2FD469B1-601E-469C-AB80-0B75E7698604@microsoft.com...
>I am running XP Home on my HP Pavillion.  Unfortunately, I do not have the 
>CD
> as it was pre-loaded on a partioned hard drive when I bought it.  I 
> recently
> installed a router/firewall after encountering a virus attack.  I was 
> unable
> to salvage any of my stuff and had to do a system recovery.  Since then, 
> I've
> ditched my Norton which didn't seem to do any good, replaced it with 
> McAfee,
> loaded and ran Spybot, Ad-Aware SE, A-Squared, SpyWareBlaster, and
> SpyWareGuard.  After my recovery, McAfee still found four items -
> Fondlewindow, Terminator (both which I deleted after reading about the
> BackWeb system HP uses) and two others that I can't seem to find anything 
> on
> (A0005078.exe and A0005079.exe in my System Volume Information).
>
> "R. C. White" wrote:
>
>> Hi, Tina.
>>
>> You haven't mentioned which Windows version you are running.  I'm 
>> assuming
>> WinXP with SP2, but please tell us for sure.
>>
>> Have you been practicing "save hex" by using a firewall, antivirus, etc.?
>> And have you recently scanned your system for non-virus types of malware,
>> with programs such as Ad-Aware and SpyBot Search & Destroy?
>>
>> Assuming some such bad guy hasn't sabotaged your computer, your next step
>> would be to run the System File Checker.  SFC will compare each WinXP
>> operating system file with the "known good" copy held in your on-disk 
>> cache
>> and replace any missing or damaged ones.  Have your WinXP CD-ROM handy; 
>> SFC
>> probably will need to see that.
>>
>> If SFC doesn't fix the problem, you may need to do an "in-place upgrade".
>> This will reinstall WinXP itself, but preserve your installed 
>> applications
>> and data.  If you need instructions, please post back (or read some 
>> messages
>> here; this is a frequently-recommended procedure).
>>
>> RC
>> -- 
>> R. C. White, CPA
>> San Marcos, TX
>> rc@corridor.net
>> Microsoft Windows MVP
>>
>> "Tina" <Tina@discussions.microsoft.com> wrote in message
>> news:90BE7138-653F-409F-B7BF-65D12710F1FA@microsoft.com...
>> > Nothing happens on both of them.  When I do the windows-pause/break
>> > combination I get the hourglass as though somthing might happen .. then
>> > nothing.
>> >
>> > Yes, system properties.  The only time I seem to be able to access the
>> > system properties is during safe mode.  I think there must be some
>> > corrupted
>> > files/registry items but have no idea how to fix them.
>> >
>> > "Walter Clayton" wrote:
>> >
>> >> "System folder"? The function you're referring to is the system
>> >> properties.
>> >> Just a wee bit different.
>> >>
>> >> Assuming you have a keyboard with a Win-Key (the key between the ctrl 
>> >> and
>> >> alt key with the windows flag on it unless this is a laptop in which 
>> >> case
>> >> you'll have to hunt for it), what happens if you press a Win-key and 
>> >> hit
>> >> the
>> >> pause-break button at the same time?
>> >> What happens if you do start->run->sysdm.cpl [enter]?
>> >>
>> >> -- 
>> >> Walter Clayton
>> >> Any technology distinguishable from magic is insufficiently advanced.
>> >>
>> >>
>> >> "Tina" <Tina@discussions.microsoft.com> wrote in message
>> >> news:1B7D9B9A-CDBB-47A3-96C1-4D0F5C6E93FE@microsoft.com...
>> >> >I am unable to open my System folder when double clicking on the
>> >> >"System"
>> >> > through my control panel.  Can anyone help me?
>>
>>
Loading