(W2k) System32 completely cloaked - not folder options issue!(W2k) System32 completel

MikeFD3S · 07-05-2005, 10:10 PM

Hello

Running Win2K

Here are the issues at hand:

C:\WINNT\SYSTEM32 is no longer visible to the GUI.

Other hidden and system files show up in explorer, except for SYSTEM32. This is not, I repeat, a simple View/Folder Options issue as the Read Only/Hidden/System files are set to viewable.

Can't access SYSTEM32 through RUN, but can manually access it through DOS (CD system32).

Will not find specific files known to reside in System32 using Windows Search function.

Will scan in SYSTEM32 using AdAware, Sophos, SpyDoctor, but will not find anything out of the ordinary.

While in DOS:

Tried to do ATTRIB on the folder through the command prompt, but it cannot locate it, nor will it list any files or extensions. (Tried attrib *.exe while in SYSTEM32, but could not list any files)

Can't locate the directory from C:\WINNT\ through the good old DIR command either.

This seems like a pretty bad one. Sygate Personal Firewall Pro is not detecting any out of the norm activity (Incoming/Outgoing Permissions only granted to NTOSKRNL.EXE, IEXPLORER.)

I've seen only a very few amount of people with these same exact problems pop up only within this past week. I haven't seen any resolutions to this yet.

HJT Log is clean, and I dont see anything out of the ordinary.

Could it be a new worm? Never seen anything like this before. I'm going to try safe mode and turn off networking. I can't find any out of the ordinary executables in any of my folders.

Chevy · 07-06-2005, 06:50 PM

If your OS drive isn't part of an array, maybe an offline scan (slave it into another 2k machine) will turn up different results.

Other than that .... Restore to just before the error? Has anything changed/been installed lately?

07-05-2005, 10:10 PM	#1 (permalink)
MikeFD3S Registered User Join Date: Jul 2005 Posts: 14 OS: Win2K	(W2k) System32 completely cloaked - not folder options issue!(W2k) System32 completel Hello Running Win2K Here are the issues at hand: C:\WINNT\SYSTEM32 is no longer visible to the GUI. Other hidden and system files show up in explorer, except for SYSTEM32. This is not, I repeat, a simple View/Folder Options issue as the Read Only/Hidden/System files are set to viewable. Can't access SYSTEM32 through RUN, but can manually access it through DOS (CD system32). Will not find specific files known to reside in System32 using Windows Search function. Will scan in SYSTEM32 using AdAware, Sophos, SpyDoctor, but will not find anything out of the ordinary. While in DOS: Tried to do ATTRIB on the folder through the command prompt, but it cannot locate it, nor will it list any files or extensions. (Tried attrib *.exe while in SYSTEM32, but could not list any files) Can't locate the directory from C:\WINNT\ through the good old DIR command either. This seems like a pretty bad one. Sygate Personal Firewall Pro is not detecting any out of the norm activity (Incoming/Outgoing Permissions only granted to NTOSKRNL.EXE, IEXPLORER.) I've seen only a very few amount of people with these same exact problems pop up only within this past week. I haven't seen any resolutions to this yet. HJT Log is clean, and I dont see anything out of the ordinary. Could it be a new worm? Never seen anything like this before. I'm going to try safe mode and turn off networking. I can't find any out of the ordinary executables in any of my folders.

07-06-2005, 06:50 PM	#2 (permalink)
Chevy Semi-Retired Manager, Microsoft Support Join Date: Jul 2003 Location: Notlob Posts: 5,172 OS: Vista Ultimate My System	If your OS drive isn't part of an array, maybe an offline scan (slave it into another 2k machine) will turn up different results. Other than that .... Restore to just before the error? Has anything changed/been installed lately? __________________ “My philosophy, like color television, is all there in black and white” -M. Python