system32.exe is part of a virus. It must have registered itself with SFC. Check the C:\WINNT\SYSTEM32\DLLCACHE folder (superhidden) for another copy of it and delete it. Make sure your SHELL key has been corrected in HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\Shell it should point to C:\WINNT\EXPLORER.EXE.
To run SFC you have to be in Normal Mode. Run sfc by using this switch: "sfc /scannow" otherwise SFC will just quit. If you're still having OS related difficulties, try reinstalling Service Pack 4. O therwise, since the virus can't infect system files it can only add in files, you should be okay and don't need to use SFC. --- In [email protected], "Etop Udoh" <[EMAIL PROTECTED]> wrote: > > > I got the virus Hidrag.A on one of my Win2k machines, and ended up > watching quite a few "system files" get deleted to rid of the virus. > > My problem is the I can get "SFC" to run. It keeps giving me some > error about windows protection. > > what is the correct procedure in running "SFC" ? > how do I run "SFC" ? Normal Mode ? Safe Mode ? > > Any ideas how to get "SFC" to run ? > > I also get an error message saying that the "system32.exe" file in > the windows directory is missing. > > any ideas ? > > > Thanks.. > > -- > ==================================================================== > | Etop Udoh | Http://www.geocities.com/sdruid11 | > | P.O. Box 1054| Http://www.angelfire.com/ga3/sdruid | > |Snellville, Ga| Http://home.bellsouth.net/p/pwp-sdruid | > | 30078 | Http://www.geocities.com/siliconvalley/bit/9122 | > |--------------| Http://home.earthlink.net/~sdruid11 | > | A+ Certified Net+ Certified | > | \/ \/ | > |[EMAIL PROTECTED] |[EMAIL PROTECTED] |[EMAIL PROTECTED]| > | !! ..........Peace and Love to All......... !! | > ==================================================================== If you have any questions or problems with any aspect of this site, please feel free to contact me directly [EMAIL PROTECTED] Please do not post personal issues directly to the group. To unsubscribe from this list, send an email to [EMAIL PROTECTED] Thank you for using A-1 Computer Tech Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/A-1-Computer_Tech/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
