Startup program entry details:

System32 (System32.exe)

This page expands upon the information already available for this entry in the Pacman's Portal Windows start-up programs database.

Definitely not required - typically viruses, spyware, adware other malware and "resource hogs"

For further information on how to identify and disable startup programs please visit the Introduction page.

Description:

Added by any number of WORMS or TROJANS!

Examples: SDBOT-U, DROPPER-K & BANKER-WC

Startup information:

Registry (Start → Run → regedit)

• Key(s): HKLM\Run, HKLM\RunServices, HKCU\Run
• Name: System32
• Data: System32.exe

HijackThis (HJT) log examples:

O4 - HKLM\..\Run: [System32] System32.exe
O4 - HKLM\..\RunServices: [System32] System32.exe
O4 - HKCU\..\Run: [System32] System32.exe

Other information:

• File location: %System%
• Tested: No

Note:

• %System% - refers to the System folder; by default this is C:\Windows\System (9x/Me), C:\Winnt\System32 (NT/2K), or C:\Windows\System32 (XP/Vista/7)
• HKLM refers to HKEY_LOCAL_MACHINE
• HKCU refers to HKEY_CURRENT_USER

Main index

Copyright © Pacman's Portal, 2001 - 2012
All rights reserved