LiveWire Peer Support Network

Printable Version of Topic "system32.exe? Virus?? Help please!"

- LiveWire Teen Forums & College Forums (http://www.golivewire.com)
-- (http://www.golivewire.com/forums/support-technical.html)
--- Computer Virus & Anti-Virus Software (http://www.golivewire.com/forums/forum-209-s-0.html)
---- system32.exe? Virus?? Help please! (http://www.golivewire.com/forums/peer-epnyib-support-a.html)


-- Posted by psychopathic doggie at 2:27 pm on April 22, 2006

So I am now in Spybot Search & Destroy, looking in the start up section. This is what it says:

Current filename:

Database status: Not required - virus, spyware, malware or other resource hog
Value:
Filename: system32.exe

Description
Added by the _AGOBOT-KU_ WORM! Note - has a blank entry under the Startup Item/Name field

Source: Paul Collins Startup list

It says it's a worm, but isn't system32.exe needed? Should I delete the entry or leave it?


-- Posted by squirellplayingtag at 2:31 pm on April 22, 2006

Look at where it's located. I have a folder called system32 but no file called system32.exe

http://www.liutilities.com/products/wintaskspro/processlibrary/system32/


-- Posted by psychopathic doggie at 2:35 pm on April 22, 2006

I didn't know it was a virus. I thought it was safe. Thanks for the link, it's appreciated. :)


-- Posted by shpadoinkle at 1:21 pm on May 13, 2006

sys32 is fine


-- Posted by MiltonAdams at 1:09 pm on May 16, 2006

Quote: from shpadoinkle at 4:21 pm on May 13, 2006


sys32 is fine

Yes and no. Their is a folder that is fine, but the specific file called system32.exe is a major security threat.

For more info...

http://www.processlibrary.com/directory/files/system32/

http://www.auditmypc.com/process/system32.asp

http://securityresponse.symantec.com/avcenter/venc/data/w32.mari@mm.html


-- Posted by Roy at 11:07 pm on June 4, 2006

Quote: from Hrabia at 1:46 am on June 5, 2006


Never delete system32.exe
WRONG!

System32.exe is an executable file, which is a virus.

The System32 that your PC is supposed to have is a folder. NOT an executable file.

Get rid of it.


www.golivewire.com