Windows 7 - SysWOW64 folder

Asked By Carl Larner on 10-Apr-10 02:32 AM
Can anyone please advise of the nature of the sub folder 'SysWOW64' on a
Window Vista 64bit computer.  It would seam to have attracted a large amount
of viruses, but only to this area.



MEB replied to Carl Larner on 10-Apr-10 03:48 AM
Probably more than you are looking for, but:

Everything You Need To Know To Start Programming 64-Bit Windows Systems

Basically you have two (2) system folders, one for legacy 32bit
dlls/coding [sysWoW64 - "W"indows "o"n "W"indows"64"], the other for
64bit [system32 - old carry-over].

What AV/anti-malware application(s) are you using and what are they
supposedly finding?

Is the system fully updated?

64bit malware is a bit "newer" and requires a bit more to work
effectively, so most likely you have 32bit malware/crimeware [not that
that makes any difference now]..

So what EXACTLY is it that you have found?

Standard response would be to suggest posting in one of the specialty
Register, and read its posting FAQ *BEFORE* posting. - Posting FAQ

Windows Info, Diagnostics, Security, Networking
The "real world" of Law, Justice, and Government
PA Bear [MS MVP] replied to Carl Larner on 10-Apr-10 02:07 PM
[Crosspost to Win64-bit newsgroup]

Always state your full Windows version (e.g., WinXP SP3; WinXP 64-bit SP2;
Vista SP1; Vista 64-bit SP2; Win7; Win7 64-bit) when posting in a forum or
newsgroup. Please do so in your next reply.

What anti-virus application or security suite is installed and is your
subscription current?  What anti-spyware applications (other than Defender)?
What third-party firewall (if any)?

Has a(another) Norton or McAfee application ever been installed on the
computer (e.g., a free-trial version that came preinstalled when you bought

A description of the differences between 32-bit versions of Windows Vista
and 64-bit versions of Windows Vista:
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
Charlie Russel - MVP replied to PA Bear [MS MVP] on 11-Apr-10 01:38 AM
Robert is going after your basic virus questions, but to answer your
question about what the SysWOW64 folder is -- it is the 32-bit version of the
applications, DLLs, etc, on your 64-bit Windows computer go in that folder.
So it has 32-bit versions of CMD.EXE, for example, along with lots of other
system applications. When you are running a 32-bit application, the SysWOW64
folder _appears_ to be located at \Windows\system32, not at
\Windows\SysWOW64. Only a 64-bit application can tell that the folder is
located at SysWOW64.

It is highly likely that you got infected by something nasty that was only
32-bit aware.

PA Bear [MS MVP] replied to Charlie Russel - MVP on 11-Apr-10 09:05 PM
[Who's this Robert person, Charles? <wink>]
Charlie Russel - MVP replied to PA Bear [MS MVP] on 12-Apr-10 12:34 AM
Sigh. I really was not having a good day, Robear. My apologies.

PA Bear [MS MVP] replied to Charlie Russel - MVP on 12-Apr-10 01:30 PM
Just kidding: S*** happens.