Randomly appearing: missing or corrupted "windows/system32/config/system"

I guess it's a super hidden subdir. Download Vernon Buerg's LIST.COM. It's an old DOS program, displays hidden and system files that even CMD can't touch.

at the CMD prompt

C:
CD \Windows\system32\config
ATTRIB -h -s -r SYSTEM /s /d

Can you see the system folder? You're problem it that the malware is trying to make a backup at the corrupt Windows\system32\config directory. The reason for the missing Windows\system32\config\system error message is that the malware is trying to resurrect itself from its backup folder which is corrupt.

C: changes Drive, if you want to go to drive d: type D:
CD or CHDIR changes your current directory
ATTRIB the - sign before hsr removes the hidden, system and read attributes respectively.
DEL deletes files . is a shortcut for *.* mask that deletes all files in your current directory
RD or RMDIR removes a subdirectory on your current dir

Syntax: Command Name /? for help on any CMD command.

Just uploaded the file LIST.COM.

Alright, I checked out the config folder using List.com and didn't see a system folder. Only one I see is a systemprofile folder. I went ahead and did the "ATTRIB -h -s -r SYSTEM /s /d" steps and I still don't see a system folder.

Thatonedude21: I suspect you simply posted steps you found in someone's thread who had that specific issue. And it appears that it doesn't apply to you cuz that subdirectory simply doesn't exist on your disk (is what you're seeing) or not seeing as is your case

I posted the steps that WinXPert suggested I do.

yes. but i think HIS steps were in response to YOUR steps first posted/asked about

Code:

c:
cd windows/system32/config/system
attrib -r -s -h *.*
del .
rd system
cd dir1
attrib -r -s -h *.*
del .
cd ..
rd dir1
cd ..
rd system

In any case, i'll let the 2 of you work it out..

The subdir does not exist then is gone. Now open regedit and search for windows\system32\config\system Uncheck Keys and Values. Delete all ocurrences if any. Use CCleaner and scan for issues.

Do you have an autorun.inf file if then is post its content.

[add'l]

Explore Documents and Settings\Administrator, All Users, other user names (depends on your pc) if it contains any .exe with a gibberish name move it to a zip file as backup. For example if it contains something like 868378080.exe search your PC for that file and delete it. Otherwise I guess your PC is clean.

I read the thread and I cannot see anywhere that the OP has stated that he has a "System" only folder, in c:\windows/system32/config
If you were talking about c:\windows/system32/config/system. That is a System file that does not have an extension (so it may look like a folder, which it isn't)

Here is a guide that can help recover missing or corrupted "System" file issues: (missing or corrupt) http://www.aade.com/XPhint/XPrecovery.htm

Note: I only post to this Topic, because it was linked to recently from here: http://www.techspot.com/vb/topic53755-3.html#post814082

I never had a folder issue to begin with, it was a file I was talking about.

Yes I know :rolleyes: