Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I had a virus that deleted the entire system32 folder. Please advise if you know what this virus is or have any feedback regarding this. Thanks.

Maybe it just hid it as in changed it's attributes.
Set up the computer to view hidden files by going to start>control panel>folder options>view tab>tick the circle beside "show hidden files and folders" and untick the box beside "hide extensions of known file types" and "hide protected system operating files">apply>ok.
Now look for:
C:\WINDOWS\System32
If you find it go to start >run> in the box type "attrib -h C:\WINDOWS\Sytem32" without the quote and a space after attrib and h.
Next go back and rehid the hidden files and folders.
Run this free online scan from Panda
When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to the desktop, then copy/paste into the text editor and post it.
Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified. You can download Hijack This at this link http://www.tomcoyote.org/hjt/ then place it into a folder of it's on, such as C:\HJT, so that back up copies can be made and not clutter your desktop or other folders and the backup copies of deleted items can be easily located if needed.
Once saved double click HijackThis.exe, and press "Scan". When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, Ctrl-A to Select All, and copy its contents into the text editor at this forum.Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.

Hi Jabuck, I tried the panda scan that you gave the link for and Avast picked up a virus as it was loading the active X software so I had to abort the connection. Just thought I'd let you know.
Hopefully my advice will help you...Please post back with your results....thanks

Jabuck,
Thanks for the feedback. I have used Panda before. In this instance since my entire sys32 folder was deleted I did a reinstall of everything. I was posting this just because I was curious if anyone has come across this virus...

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |