Missing my System32 folder!?!

[leecho7]

Yeah, I was looking around my windows folder in my c drive, and realized my system32 folder is missing. I haven't touched it eversince I reformatted my harddrive. Is it possible to retrive it somehow? I'm guessin, probably not. But any help is appreciated.


**Ok, I tried the tools show hidden, no luck. I also tried to find it in all the other folders in case it was mis-placed somehow or something. I also tried the search option to no avail. I know that without my system 32 folder, windows wouldn't run right if at all.
I then tried manually writing in the directory in my toolbar thing, and it worked... however it's still invisible in my windows folder.

[Rob Williams]

If you type the actual address in your address bar, you should be able to access it.

C:\WINNT\system32
or
C:\Windows\system32
or
C:\Windows\system\system32

The option to you should pay attention to is "Hide Protected System Files".

I never heard of someone losing that folder before.. Windows would complain quick.

[leecho7]

Yeah it's weird, I did that and it works fine, (typing in my toolbar the entire directory) but if I tried to find the folder in my WINDOWS folder it wont find it. If I tried to create a new file folder named system32, it won't let me saying the folder already exists, and it won't let me over-write it.
I guess everything is fine, it's just a hassle to manually type in the entire directory just to reach my system32 folder. I might actually reformat my system... again... if this problem keeps up. I don't like my system being this way... heheh.

[Rob Williams]

That's not a problem to format for. Have you tried arranging the folders by alpha order? A folder just doesn't disappear, because it *is* there. There must be an option somewhere that's not showing it to you.

[madmat]

You might have the option to view that folder turned off in folder options....

[leecho7]

Yeah, I tried re-arranging them and the folder options. I did almost everything imaginable. I even ran outside wearing a tutu flying a kite with a key attached to the string during a lightning storm figuring if I did somethin drastic, it'll show up. But no dice.
I pretty much looked over the folder options menu with surgical precision, and couldn't find a way to reveal my 'missing' system32 folder. All my other folders are showing fine even my hidden ones except for my system32. It's like a ghost folder, only appearing when you type it in manually.


Oh yeah forgot to mention, when I manually type in the directory, and I go into my system32 folder and I right click, it says the file folder is hidden. It is shaded in the greyish color so I can't unselect it as hidden. It's permanently hidden or something. Even when I try 'view hidden folders' it still doesn't show up. It's weird cause this hasn't happened to me before where any of my folders just all of a sudden turn uber hidden.

[Rob Williams]

Wierd.

Have you installed *any* program in the last few days? And, why do you need your System32 to show?

Are you using Windows XP?

[leecho7]

I did recently install the newest version of Microsoft Office. Maybe that could be it? Well, the reason why I want my system32 folder to show is it would be more conveniant for me to edit my host file in the driver folder. The reason so being is, well honestly to play certain games on 'not-so-public' servers.

[madmat]

Go into tools/folder options and make sure the "display contents of system folders" checkbox is checked. If it isn't the system 32 folder won't be seen...

[Rob Williams]

Maybe it's a virus? (http://www.geekstogo.com/forum/System32_folder_is_missing_in_Windows-t25890.html)

[leecho7]

Yeah, I did check that 'Display system and it's folders' thing, ran several virus scanners which turned up nothing. Still can't see the folder.

[Rob Williams]

Your Windows must not like you :(

I'm lost man.. I've never heard of that happening before. *Possibly* you have a trojan or something that's not detected.

[Regeneration]

your system cannot run without system32

[Unregistered]

It's there, it just doesn't show. Your option in Tools/Options "Hide important system files" is checked. When you uncheck it, it shows system32, but it's still hidden and can't be unattributed. Delete regedit.com (not .exe!) and reboot. Should work fine now...

[Rob Williams]

It's there, it just doesn't show. Your option in Tools/Options "Hide important system files" is checked. When you uncheck it, it shows system32, but it's still hidden and can't be unattributed. Delete regedit.com (not .exe!) and reboot. Should work fine now...

What's regedit.com? I've never seen it before.

[Unregistered]

i agree it has to be a virus that has hidden the folder so u cant delete the virus file mines been this way for bout a month now does anyone know any virus that could hide a folder from view

[Rob Williams]

I've personally never heard of this before. I would definitely try more than one virii scanner though, and Spyware checkers as well.

[Unregistered]

it is a virus i have the same problem i know cuz i executed a exe file that was thought to be something it wasn't and then after scanning it detected a worm virus. i cleaned mostly all of the virus cept the system32 folder still does not show up, but is there. any suggestions ?

[Unregistered]

the hide protected operating system files does feature does not work i even tried to reset all folder and even restore defaults , but the folder still does not display. there must be a reggistry entry somewhere dictating this behavior.

[Unregistered]

i used xoft to detect/remove this worm virus here is the log:

<FOLDER PATH = "Gaobot Worm C:\Program Files\winupdates"/>

<FILE PATH = "Gaobot Worm C:\Program Files\winupdates\a.tmp"/>

<FILE PATH = "Gaobot Worm C:\Program Files\winupdates\a.zip"/>

<FILE PATH = "Gaobot Worm C:\Program Files\winupdates\winupdates.exe"/>

<QInformation Message = "Quarantining File Mugly - C:\WINDOWS\system32\bszip.dll"/>

<QInformation Message = "Quarantining File Alcan.A - C:\WINDOWS\system32\cmd.com"/>

<QInformation Message = "Quarantining File Alcan.A - C:\WINDOWS\system32\netstat.com"/>

<QInformation Message = "Quarantining File Alcan.A - C:\WINDOWS\system32\ping.com"/>

<QInformation Message = "Quarantining File Alcan.A - C:\WINDOWS\system32\regedit.com"/>

<QInformation Message = "Quarantining File Alcan.A - C:\WINDOWS\system32\taskkill.com"/>

<QInformation Message = "Quarantining File Alcan.A - C:\WINDOWS\system32\tasklist.com"/>

<QInformation Message = "Quarantining File Alcan.A - C:\WINDOWS\system32\tracert.com"/>

<QInformation Message = "Quarantining Folder Gaobot Worm - C:\Program Files\winupdates"/>

<QInformation Message = "Quarantining File Gaobot Worm - C:\Program Files\winupdates\a.tmp"/>

<QInformation Message = "Quarantining File Gaobot Worm - C:\Program Files\winupdates\a.zip"/>

<QInformation Message = "Quarantining File Gaobot Worm - C:\Program Files\winupdates\winupdates.exe"/>


<SW NAME = "Default Windows Settings">
<REGVALUE RES = "Deleting Register Value Changed" />
<REGVALUE RES = "Register Values Successfully Changed"/>
</SW>

<SW NAME = "Windows Update Features Disabled">

<REGVALUE RES = "Deleting Register Value Changed" />

<REGVALUE RES = "Register Values Successfully Changed"/>
</SW>

<SW NAME = "Mugly">
<FILE NAME = "C:\WINDOWS\system32\bszip.dll"/>

<FILE RES = "C:\WINDOWS\system32\bszip.dll Successfully ReMoved"/>
</SW>

<SW NAME = "Alcan.A">
<FILE NAME = "C:\WINDOWS\system32\cmd.com"/>

<FILE RES = "C:\WINDOWS\system32\cmd.com Successfully ReMoved"/>

<FILE NAME = "C:\WINDOWS\system32\netstat.com"/>

<FILE RES = "C:\WINDOWS\system32\netstat.com Successfully ReMoved"/>

<FILE NAME = "C:\WINDOWS\system32\ping.com"/>

<FILE RES = "C:\WINDOWS\system32\ping.com Successfully ReMoved"/>

<FILE NAME = "C:\WINDOWS\system32\regedit.com"/>

<FILE RES = "C:\WINDOWS\system32\regedit.com Successfully ReMoved"/>

<FILE NAME = "C:\WINDOWS\system32\taskkill.com"/>

<FILE RES = "C:\WINDOWS\system32\taskkill.com Successfully ReMoved"/>

<FILE NAME = "C:\WINDOWS\system32\tasklist.com"/>

<FILE RES = "C:\WINDOWS\system32\tasklist.com Successfully ReMoved"/>

<FILE NAME = "C:\WINDOWS\system32\tracert.com"/>

<FILE RES = "C:\WINDOWS\system32\tracert.com Successfully ReMoved"/>
</SW>

<SW NAME = "Gaobot Worm">
<DIR NAME = "C:\Program Files\winupdates"/>

<FILE RES = "C:\Program Files\winupdates\a.tmp Successfully ReMoved"/>

<FILE RES = "C:\Program Files\winupdates\a.zip Successfully ReMoved"/>

<FILE RES = "C:\Program Files\winupdates\winupdates.exe Successfully ReMoved"/>

<DIR RES = "Successfully ReMoved C:\Program Files\winupdates"/>

<FILE NAME = "C:\Program Files\winupdates\a.tmp"/>

<FILE NAME = "C:\Program Files\winupdates\a.zip"/>

<FILE NAME = "C:\Program Files\winupdates\winupdates.exe"/>
</SW>
</Removal>

[Unregistered]

Alcan.A
Gaobot Worm
Mugly

[Rob Williams]

Wow, great stuff.. I'll keep that in the mind for the future.

Thanks Unregistered :P

[Unregistered]

ur welcome, but i still cannot see the folder so plz help

[Unregistered]

i also ran disk fixer in my fix-it-utilities program and found several errors which i took a screen shot off and repaire. it prompted me to run a CHKDSK on my system which i did, but still the system32 folder does not display. unfortunately i do not have a sfc.exe file (system file checker) as i am on windows 2000 pro.

i am running out of options here.

[Greg214]

hi i am the person who posted info about virus i jus registered here in hopes to help find solution to system32 folder not being displayed.

[Greg214]

thanks to a friend in another forum i managed to fix the problem, but i wanted to tell everyone here how i did it.

Open dos command prompt and type: attrib -a -h -r -s c:\windows\system32

[Rob Williams]

Oh geez!

Something so simple.. how could that not even of crossed my mind :|

Glad to hear you got it working, and wasn't too much trouble to do so.

[waylandprod]

The NTDVM CPU has encountered an illegal instruction for regedit in the run line is also a byproduct of this virus. BUT NORTON COULDN"T FIX IT!!! If you have system32 hidden from view even after you obviously enabled it to be viewed, the files inside need to do so as well.

Go to Run and type in Cmd.exe
(Cmd.exe because a bad cmd.com is in your system32 folder) Then type in:
attirb -a -h -r -s c:\windows\system32\*.*

That will make all the files visible. Why should ANY file be hidden, unless it wants to remain that way. Hmm..... Here is a list of the evil inside I got from Norton.... even though they couldn't find them, until I went and made all visible.
EVIL FILES:
:mad: ping.com, netstat.com, regedit.com, tasklist.com, taskkill.com, tracert.com, cmd.com, and ansmtp.dll:mad:

Trust me, viruses are getting smarter, so sometimes you have to be smarter than norton. Then again I have 2004 version, but it's updated. Maybe I should buy the new 2006 when it comes out. That is a consideration.

There are a few registry items that came up as well to fix from Norton's article:
http://www.symantec.com/avcenter/venc/data/w32.picrate.a@mm.html

Keep in mind that if regedit.com is still there, type in Regedit.exe.

So much evil in the world, just thought I might make a contribution in the fight against it, so I am posting for the first time.

[Rob Williams]

Welcome to the forums!

I personally enjoy McAfee much more than Norton, but the 2006 version has me wanting to try it. There is a lot of evil in the world. It sucks, but Ad-Aware is just as important as Virus scanning now.