Why does w2k open the system32 folder when I log in????

[MulLa]

Hi,

This problem happened all of a sudden today. Last night my computer was working fine with no problems at all shut down ok with no programs / windows open.

Then tonight when I got home I started up again and it opens up the sytem32 folder!!!

I am in a w2k domain network. I was logged in as myself so I tried the admin account in the same machine it it didn't open the system32 folder. Then I tried logging in at the server both at myself and the admin and no system32 on start up either. So it's really only limited to my user account in this particular machine!!

I restarted several times making sure each time that I closed system32 but didn't work. I didn't switch over to a mandatory profile unless w2k just decided to do that all by itself AND have the system32 folder open.

Thanks in advance for any help.

 

[NiPeng]

Check registry current user\software\microsoft\windows\currentversion\run for a key pointing to a non existing program.

 

[sohcrates]

or download startup control panel
(same thing as editing registry, but easier)

 

[FMJGomerPyle]

make sure you are logged in as yourself when you edit the HKEY_CURRENT_USER part of the registry

 

[MulLa]

I have already checked that registry key before. But doubled checked anyway and didn't find anything suspecious there. The thing is if it's entered there in the registry the window should pop up no matter who logs onto the machine. This problem is only restricted to my user account. Hmmm....

Ok under the current user hive in "run" I found that it has an entry for CFTMON.exe!!! I searched for the file and it's located under system32. What does this program do?? Probably try exporting the key and deleting it and see what happens.

 

[MulLa]

I found the reason!!!!

At first I thought FMJGomerPyle's suggestion should be right. I am logged in as myself but because policy don't allow me to use registry editing tool I just use the "runas" command and used the admin account. I guess the registry editor thought I am logged in as admin therefore the CURRENT_USER hive also belong to the admin. There was on the cftmon.exe there which I exported and deleted and it came up with an error message once I logged in as admin. Well that's quickly fixed after I imported the key back in.

Then I enabled myself to edit the registry and I found a reference to the RealJukeBox SysTray in the "run" key!! Well I then exported and deleted this key and now everything is back to normal.

The funny thing is... I didn't even install RealPlayer last night. It was installed AGES ago... Hmm... strange...

But thanks everyone for your inputs and help!