system32 files duplicating & relocating



angryhippy
07-09-2005, 11:42 PM
This morning I booted up, went to My Docs and found about 100 system32 files
in there. I verified that the originals were still intact in the sys32
folder, and the ones in My Docs were dupes. Also in the sys32 folder about
midwat through the ones that were duplicated are 55 NLS files with file names
beginning with c then an underscore and then a number. like this c_28598.

I've scanned with AVG, Housecall, Symantec online scan, AdAware, Spybot S&D,
HijackThis, CWShredder. All updated, all showing nothing. This was installed
fresh Saturday.

Doug Knox MS-MVP
07-09-2005, 11:42 PM
NLS files are normal.

http://filext.com/detaillist.php?extdetail=NLS

As for the others, its possible that you inadvertenly dragged and dropped files from the System32 folder to your my documents folder. In that event, XP's Windows File Protection would have automatically restored them from the DLLCACHE folder in Windows\System32.
--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"angryhippy" <angryhippy@discussions.microsoft.com> wrote in message news:E63A6275-1734-45E9-B93B-F82314964E37@microsoft.com...
> This morning I booted up, went to My Docs and found about 100 system32 files
> in there. I verified that the originals were still intact in the sys32
> folder, and the ones in My Docs were dupes. Also in the sys32 folder about
> midwat through the ones that were duplicated are 55 NLS files with file names
> beginning with c then an underscore and then a number. like this c_28598.
>
> I've scanned with AVG, Housecall, Symantec online scan, AdAware, Spybot S&D,
> HijackThis, CWShredder. All updated, all showing nothing. This was installed
> fresh Saturday.

Rich Barry
07-09-2005, 11:42 PM
You can take a look at some of the possibilites that Google came up
with.
http://www.google.com/search?hl=en&lr=&q=c_28598.nls&btnG=Search


"angryhippy" <angryhippy@discussions.microsoft.com> wrote in message
news:E63A6275-1734-45E9-B93B-F82314964E37@microsoft.com...
> This morning I booted up, went to My Docs and found about 100 system32
> files
> in there. I verified that the originals were still intact in the sys32
> folder, and the ones in My Docs were dupes. Also in the sys32 folder about
> midwat through the ones that were duplicated are 55 NLS files with file
> names
> beginning with c then an underscore and then a number. like this c_28598.
>
> I've scanned with AVG, Housecall, Symantec online scan, AdAware, Spybot
> S&D,
> HijackThis, CWShredder. All updated, all showing nothing. This was
> installed
> fresh Saturday.

angryhippy
07-09-2005, 11:42 PM
Even if i inadvertently dragged some files, I don't see how I could have
dragged the ones before, and the ones after the NLS files, without moving
them. Anyway, I'm going to just put this one down as the ghost in the
machine. Could you tell me what the NLS files are for? I've just never
noticed them, I guess. If they are regular sys files.

"Doug Knox MS-MVP" wrote:

> NLS files are normal.
>
> http://filext.com/detaillist.php?extdetail=NLS
>
> As for the others, its possible that you inadvertenly dragged and dropped files from the System32 folder to your my documents folder. In that event, XP's Windows File Protection would have automatically restored them from the DLLCACHE folder in Windows\System32.
> --
> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
> Win 95/98/Me/XP Tweaks and Fixes
> http://www.dougknox.com
> --------------------------------
> Per user Group Policy Restrictions for XP Home and XP Pro
> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> --------------------------------
> Please reply only to the newsgroup so all may benefit.
> Unsolicited e-mail is not answered.
>
> "angryhippy" <angryhippy@discussions.microsoft.com> wrote in message news:E63A6275-1734-45E9-B93B-F82314964E37@microsoft.com...
> > This morning I booted up, went to My Docs and found about 100 system32 files
> > in there. I verified that the originals were still intact in the sys32
> > folder, and the ones in My Docs were dupes. Also in the sys32 folder about
> > midwat through the ones that were duplicated are 55 NLS files with file names
> > beginning with c then an underscore and then a number. like this c_28598.
> >
> > I've scanned with AVG, Housecall, Symantec online scan, AdAware, Spybot S&D,
> > HijackThis, CWShredder. All updated, all showing nothing. This was installed
> > fresh Saturday.
>

Doug Knox MS-MVP
07-09-2005, 11:43 PM
The link I included in my original reply gave quite a bit of information on NLS files. They are Code Page National Language Support files. They allow different keyboards, character sets and etc. for different languages/regions.

http://filext.com/detaillist.php?extdetail=NLS

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"angryhippy" <angryhippy@discussions.microsoft.com> wrote in message news:877F02B6-9467-4D02-AFE9-BDCE37921C08@microsoft.com...
> Even if i inadvertently dragged some files, I don't see how I could have
> dragged the ones before, and the ones after the NLS files, without moving
> them. Anyway, I'm going to just put this one down as the ghost in the
> machine. Could you tell me what the NLS files are for? I've just never
> noticed them, I guess. If they are regular sys files.
>
> "Doug Knox MS-MVP" wrote:
>
>> NLS files are normal.
>>
>> http://filext.com/detaillist.php?extdetail=NLS
>>
>> As for the others, its possible that you inadvertenly dragged and dropped files from the System32 folder to your my documents folder. In that event, XP's Windows File Protection would have automatically restored them from the DLLCACHE folder in Windows\System32.
>> --
>> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
>> Win 95/98/Me/XP Tweaks and Fixes
>> http://www.dougknox.com
>> --------------------------------
>> Per user Group Policy Restrictions for XP Home and XP Pro
>> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
>> --------------------------------
>> Please reply only to the newsgroup so all may benefit.
>> Unsolicited e-mail is not answered.
>>
>> "angryhippy" <angryhippy@discussions.microsoft.com> wrote in message news:E63A6275-1734-45E9-B93B-F82314964E37@microsoft.com...
>> > This morning I booted up, went to My Docs and found about 100 system32 files
>> > in there. I verified that the originals were still intact in the sys32
>> > folder, and the ones in My Docs were dupes. Also in the sys32 folder about
>> > midwat through the ones that were duplicated are 55 NLS files with file names
>> > beginning with c then an underscore and then a number. like this c_28598.
>> >
>> > I've scanned with AVG, Housecall, Symantec online scan, AdAware, Spybot S&D,
>> > HijackThis, CWShredder. All updated, all showing nothing. This was installed
>> > fresh Saturday.
>>

angryhippy
07-09-2005, 11:43 PM
Thank you! I missed that the first time. I ran BootVis last night, which I
forgot about. I suspect I may have a sketchy or corrupted download. Although
I did only run the boot trace, and not the optimizer. Anyway, it doesn't seem
to have adversely affected the system, so I'm thinking I'll just put it to
rest and chalk it up to the ghost in the machine. Thanks again for the help

"Doug Knox MS-MVP" wrote:

> The link I included in my original reply gave quite a bit of information on NLS files. They are Code Page National Language Support files. They allow different keyboards, character sets and etc. for different languages/regions.
>
> http://filext.com/detaillist.php?extdetail=NLS
>
> --
> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
> Win 95/98/Me/XP Tweaks and Fixes
> http://www.dougknox.com
> --------------------------------
> Per user Group Policy Restrictions for XP Home and XP Pro
> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> --------------------------------
> Please reply only to the newsgroup so all may benefit.
> Unsolicited e-mail is not answered.
>
> "angryhippy" <angryhippy@discussions.microsoft.com> wrote in message news:877F02B6-9467-4D02-AFE9-BDCE37921C08@microsoft.com...
> > Even if i inadvertently dragged some files, I don't see how I could have
> > dragged the ones before, and the ones after the NLS files, without moving
> > them. Anyway, I'm going to just put this one down as the ghost in the
> > machine. Could you tell me what the NLS files are for? I've just never
> > noticed them, I guess. If they are regular sys files.
> >
> > "Doug Knox MS-MVP" wrote:
> >
> >> NLS files are normal.
> >>
> >> http://filext.com/detaillist.php?extdetail=NLS
> >>
> >> As for the others, its possible that you inadvertenly dragged and dropped files from the System32 folder to your my documents folder. In that event, XP's Windows File Protection would have automatically restored them from the DLLCACHE folder in Windows\System32.
> >> --
> >> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
> >> Win 95/98/Me/XP Tweaks and Fixes
> >> http://www.dougknox.com
> >> --------------------------------
> >> Per user Group Policy Restrictions for XP Home and XP Pro
> >> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> >> --------------------------------
> >> Please reply only to the newsgroup so all may benefit.
> >> Unsolicited e-mail is not answered.
> >>
> >> "angryhippy" <angryhippy@discussions.microsoft.com> wrote in message news:E63A6275-1734-45E9-B93B-F82314964E37@microsoft.com...
> >> > This morning I booted up, went to My Docs and found about 100 system32 files
> >> > in there. I verified that the originals were still intact in the sys32
> >> > folder, and the ones in My Docs were dupes. Also in the sys32 folder about
> >> > midwat through the ones that were duplicated are 55 NLS files with file names
> >> > beginning with c then an underscore and then a number. like this c_28598.
> >> >
> >> > I've scanned with AVG, Housecall, Symantec online scan, AdAware, Spybot S&D,
> >> > HijackThis, CWShredder. All updated, all showing nothing. This was installed
> >> > fresh Saturday.
> >>
>


system32 files duplicating & relocating