[kurtsm]

Hello-
Each time I startup my computer, I get an error message saying:
"error, C:\Windows\System32\Tools\DelFolders.exe Cannot find file"
What does this mean? It seems that my computer is running fine, but I am just worried that this could be an indicator of something serious.

Please advise,
Kurtis

[Advertisements]

Let us take a closer look at what is running on your PC. We'll need you to use a free diagnostic tool (HiJackThis) and post a log back here with the results.

Click the HijackThis Guide in my signature, download it and follow the instructions in the guide.

Most of what it lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.

[Smokey]

Let us take a closer look at what is running on your PC. We'll need you to use a free diagnostic tool (HiJackThis) and post a log back here with the results.

Click the HijackThis Guide in my signature, download it and follow the instructions in the guide.

Most of what it lists will be harmless or even essential, DO NOT delete or modify anything yet! Someone will be along to tell you what steps to take after you post the contents of the scan results.

[kurtsm]

Hi-
Thanks for the fast response. Should I run hijackthis scan, or the startup list?

Please advise,
Kurtis

[kurtsm]

Here is the hijackthis log (not startup):
Logfile of HijackThis v1.98.2
Scan saved at 10:19:12 PM, on 11/1/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gvsu.edu/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.gvsu.edu/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunOnce: [Execute] C:\WINDOWS\System32\Tools\DelFolders.exe
O4 - Startup: Reboot.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop...p/PCPitStop.CAB
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D60A85A5-3F13-4113-A60B-A5B0E48D1903}: NameServer = 192.168.2.1,204.127.198.4

Thanks for the help,
Kurtis

[admin]

Please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items, then click fix checked.
O4 - HKLM\..\RunOnce: [Execute] C:\WINDOWS\System32\Tools\DelFolders.exe
O4 - Startup: Reboot.exe
(optional, but will improve system performance)
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

Please go offline, close all browsers and any open Windows, making sure that only HijackThis is open. Scan and when it finishes, put an X in the boxes, only next to these following items, then click fix checked.
C:\WINDOWS\System32\Tools\DelFolders.exe

Reboot your PC.

If you would please, rescan with HijackThis and post a fresh log in this same topic, and let us know how your system's working.

[kurtsm]

Okay, the error message doen't re-appear at startup and everything seems fine. Here is the latest hijackthis log:

stephen hawking
Grand Valley State University
1502-4320-1249-0782-2967-6975

Windows XP 5.1
IA32
WinAspi: -
ahead WinASPI: File 'C:\Program Files\Ahead\Nero\Wnaspi32.dll': Ver=2.0.1.59, size=160016 bytes, created 1/29/2003 4:37:36 PM
Nero Version: 5.5.10.45 (Nero Express)
Recorder: < COMBO-52X16C> Version: 1.83 - HA 0 TA 0 - 5.5.10.45
Adapter driver: <atapi> HA 0
Drive buffer : 2048kB
Bus Type : default (0) -> ATAPI, detected: ATAPI
CD-ROM: < COMBO-52X16C> Version: 1.83 - HA 0 TA 0 - 5.5.10.45
Adapter driver: <atapi> HA 0
Bus Type : default (0) -> ATAPI, detected: ATAPI

=== Scsi-Device-Map ===
CdRomPeripheral : COMBO-52X16C atapi Port 0 ID 0 DMA: On
DiskPeripheral : ST380020A atapi Port 1 ID 0 DMA: On
=======================

AutoRun : 1
Excluded drive IDs:
CmdQueuing : 1
CmdNotification: 2
WriteBufferSize: 66060288 (0) Byte
ShowDrvBufStat : 0
EraseSpeed : 0
BUFE : 0
Physical memory : 447MB (458220kB)
Free physical memory: 238MB (244248kB)
Memory in use : 46 %
Uncached PFiles: 0x0
Use Static Write Speed Table: 0
Use Inquiry : 1
Global Bus Type: default (0)
Check supported media : Enabled (1)
Wizard: On

25.10.2004
Audio CD
7:48:04 PM #1 CDADOC -1 File Cdadoc.cpp, Line 1622
Audio item log info:
Audio document burn settings:
=============================
Burn mode: DAO,
CD Text: On,
Cache disk or network files: No,
Cache small files: No,
Cache files smaller than 65536 bytes.
Audio Multisession: No
List of audio tracks:
=====================
Track 01: Length: 06:18.00, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.1 in f Minor, oP.2 nO.1-1 Allegro.wav'.
Track 02: Length: 04:58.38, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.1 in f Minor, oP.2 nO.1-2 Adagio.wav'.
Track 03: Length: 03:24.25, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.1 in f Minor, oP.2 nO.1-3 Menuetto (Allegretto).wav'.
Track 04: Length: 05:32.12, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.1 in f Minor, oP.2 nO.1-4 Prestissimo.wav'.
Track 05: Length: 07:15.00, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.2 in a Major, oP.2 nO.2-1 Allegro Vivace.wav'.
Track 06: Length: 06:28.00, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.2 in a Major, oP.2 nO.2-2 Largo Appassionato.wav'.
Track 07: Length: 03:30.00, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.2 in a Major, oP.2 nO.2-3 Scherzo (Allegretto).wav'.
Track 08: Length: 07:03.25, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.2 in a Major, oP.2 nO.2-4 Rondo (Grazioso).wav'.
Track 09: Length: 10:19.50, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.3 in c Major, oP.2 nO.3; 1 Allegro Con Brio.wav'.
Track 10: Length: 07:34.50, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.3 in c Major, oP.2 nO.3; 2 Adagio.wav'.
Track 11: Length: 03:09.25, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.3 in c Major, oP.2 nO.3; 3 Scherzo (Allegro).wav'.
Track 12: Length: 05:23.25, Pause frames: 150, Filters: 1, Name: 'Ludwig Van Beethoven - Sonata nO.3 in c Major, oP.2 nO.3; 4 Allegro Assai.wav'.
Total size: 71:20.25

7:48:04 PM #2 Phase 89 File dlgbrnst.cpp, Line 1655
Super Link activated

7:48:04 PM #3 Text 0 File Reader.cpp, Line 115
Reader running

7:48:04 PM #4 Text 0 File Burncd.cpp, Line 3749
Turn on Disc-At-Once, using CD-R/RW media

7:48:04 PM #5 Text 0 File ThreadedTransferInterface.cpp, Line 672
Setup items (original item values)
0: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.1 in f Minor, oP.2 nO.1-1 Allegro.wav)
2 indices, index0 (150) not provided
original CD pos #0 + 28350 (28350) = #28350/6:18.0
relocatable, CD pos for caching/writing not required/not required, no patch infos
1: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.1 in f Minor, oP.2 nO.1-2 Adagio.wav)
2 indices, index0 (150) not provided
original CD pos #0 + 22388 (22388) = #22388/4:58.38
relocatable, CD pos for caching/writing not required/not required, no patch infos
2: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.1 in f Minor, oP.2 nO.1-3 Menuetto (Allegretto).wav)
2 indices, index0 (150) not provided
original CD pos #0 + 15325 (15325) = #15325/3:24.25
relocatable, CD pos for caching/writing not required/not required, no patch infos
3: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.1 in f Minor, oP.2 nO.1-4 Prestissimo.wav)
2 indices, index0 (150) not provided
original CD pos #0 + 24912 (24912) = #24912/5:32.12
relocatable, CD pos for caching/writing not required/not required, no patch infos
4: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.2 in a Major, oP.2 nO.2-1 Allegro Vivace.wav)
2 indices, index0 (150) not provided
original CD pos #0 + 32625 (32625) = #32625/7:15.0
relocatable, CD pos for caching/writing not required/not required, no patch infos
5: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.2 in a Major, oP.2 nO.2-2 Largo Appassionato.wav)
2 indices, index0 (150) not provided
original CD pos #0 + 29100 (29100) = #29100/6:28.0
relocatable, CD pos for caching/writing not required/not required, no patch infos
6: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.2 in a Major, oP.2 nO.2-3 Scherzo (Allegretto).wav)
2 indices, index0 (150) not provided
original CD pos #0 + 15750 (15750) = #15750/3:30.0
relocatable, CD pos for caching/writing not required/not required, no patch infos
7: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.2 in a Major, oP.2 nO.2-4 Rondo (Grazioso).wav)
2 indices, index0 (150) not provided
original CD pos #0 + 31750 (31750) = #31750/7:3.25
relocatable, CD pos for caching/writing not required/not required, no patch infos
8: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.3 in c Major, oP.2 nO.3; 1 Allegro Con Brio.wav)
2 indices, index0 (150) not provided
original CD pos #0 + 46475 (46475) = #46475/10:19.50
relocatable, CD pos for caching/writing not required/not required, no patch infos
9: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.3 in c Major, oP.2 nO.3; 2 Adagio.wav)
2 indices, index0 (150) not provided
original CD pos #0 + 34100 (34100) = #34100/7:34.50
relocatable, CD pos for caching/writing not required/not required, no patch infos
10: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.3 in c Major, oP.2 nO.3; 3 Scherzo (Allegro).wav)
2 indices, index0 (150) not provided
original CD pos #0 + 14200 (14200) = #14200/3:9.25
relocatable, CD pos for caching/writing not required/not required, no patch infos
11: TRM_AUDIO_NOPRE (Ludwig Van Beethoven - Sonata nO.3 in c Major, oP.2 nO.3; 4 Allegro Assai.wav)
2 indices, index0 (150) not provided
original CD pos #0 + 24250 (24250) = #24250/5:23.25
relocatable, CD pos for caching/writing not required/not required, no patch infos
--------------------------------------------------------------

7:48:23 PM #6 Phase 40 File dlgbrnst.cpp, Line 1655
Aborted by user

7:48:23 PM #7 Text 0 File DlgWaitCD.cpp, Line 230
Write in overburning mode: FALSE

7:48:23 PM #8 Text 0 File DlgWaitCD.cpp, Line 1700
Recorder: COMBO-52X16C;
CD type reading failed
ATIP Data: ?

7:48:23 PM #9 Text 0 File Scsicmd.cpp, Line 406
SCSI not using temporary buffers
20 out of 20 temporary buffers allocated


Existing drivers:
File 'Drivers\atapi.sys': Ver=5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), size=95360 bytes, created 8/4/2004 1:59:42 AM (Adapter driver for rec)

Registry Keys:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon\AllocateCDROMs : 0 (Security Option)

Thanks alot,
Kurtis