• Still running Windows 7 or earlier? Support for Windows 7 ended on January 14th 2020. Please review the thread here for more details.

SYSWOW64 Folders pop up after reboot

I don't see any Cinepak software listed, so I tried to rename and got this;
 

Attachments

  • Screenshot 2015-01-22 17.59.53.jpg
    Screenshot 2015-01-22 17.59.53.jpg
    194.3 KB · Views: 10
You may need to take ownership, but you should be able to boot into safe mode and rename it without TrustedInstaller getting in the way as an alternative method.
 
Permissions are fiddly. Ownership often isn't enough. There are, well, permissions to sort out as well.

The full instructions which will break through any level of ownership/permissions possible are:

Navigate to the file in question, right click on it and select Properties.
Under the Security tab, click Advanced.
Under the Owner tab, click Edit.
Click "Other Users and Groups".
Click Advanced.
Click "Find Now".
Scroll down and double click on Everyone.
Click OK THREE times.
Click on the Permissions tab.
Under type Deny, single click on any entries and click Remove. (N.B.: There may not be any Deny entries, in which case just ignore this step. Just remove any that do exist)
Click OK.
Click Edit (now on the standard file Property window under the Security tab).
Click Add.
Click Advanced.
Click "Find Now".
Scroll down and double click on Everyone.
Click OK.
Single click on Everyone and then tick the "Full Control" box under Allow.
Click OK TWO times.


This is why we created SFCFix. Want a script to do it for you? :)



EDIT: Ooops! You beat me to it!
 
Can you please open up the Run dialog for me [Windows Key + R], type in explorer.exe and press enter. Which folder opens up? It should be either Documents or This PC depending on which version of Windows you're running. I'm wondering whether your default has been changed.

Now please open a Task Manager instance (Ctrl-Shift-Esc) > Processes tab and end the Windows Explorer (explorer.exe) process. You will lose your Desktop icons and taskbar.

Now go to File > Run new task > and type in the following:

%SystemRoot%\SysWOW64\explorer.exe (should open a folder)
{end the Windows Explorer process again}
%SystemRoot%\explorer.exe (should return your Desktop)
%SystemRoot%\explorer.exe (should open another folder)


By now you should have popped up three windows - I've marked them in red for you. Which folder did each of them take you to?

Richard
 
Can you please open up the Run dialog for me [Windows Key + R], type in explorer.exe and press enter. Which folder opens up? It should be either Documents or This PC depending on which version of Windows you're running. I'm wondering whether your default has been changed.

Richard

Libraries is what opens up. Will try the task manager next.
 
Now please open a Task Manager instance (Ctrl-Shift-Esc) > Processes tab and end the Windows Explorer (explorer.exe) process. You will lose your Desktop icons and taskbar.

Now go to File > Run new task > and type in the following:

%SystemRoot%\SysWOW64\explorer.exe (should open a folder)
{end the Windows Explorer process again}
%SystemRoot%\explorer.exe (should return your Desktop)
%SystemRoot%\explorer.exe (should open another folder)


By now you should have popped up three windows - I've marked them in red for you. Which folder did each of them take you to?

Richard



1. Libraries is what opens up
2. Desktop returns
3. Libraries again
 
I'm pretty sure I tried it then, but I just ran it now, and this is all it found;

[C:\Users\Dean\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Dean\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}


Pop-ups are still happening.
 
From an elevated command prompt, launch the following command and post here the result (possibly within hide and code tags):
Code:
schtasks /query /fo table /nh > "%userprofile%\desktop\TasksList.txt"
 
It seems clean...
In regedit, check [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]: the Userinit value should be C:\Windows\System32\Userinit.exe,

I'd also try other antimalware tools, like roguekiller, junk removal tool and so forth.
Hence maybe moderators here will suggest you to open a new topic on the proper forum section, or perhaps they'll move the entire topic.
 
Hi,

This is a bit of a stab in the dark really but, do you know why your antivirus program (or at least parts of it) appears to be installed on a different drive? I would have expected it to be on the same drive as the operating system.

Someone said earlier that your issue could be due to a minor registry problem.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top