You are correct, it wasn't limited to two files. But it was limited to these
two specific system files. We used a command line scanned to identify and
remove the virus from the system. The two files I listed below are the
system files it quarantined. I do not want to use these files, and thus is
why I am asking for help on restoring them from a CAB.
"Leonard Grey" wrote:
> I can assure you that the infection is not limited to two files.
>
> Your courses of action here are: a) identify the infection (if possible)
> and remove it (if possible); or 2) erase the hard disk and start over.
>
> If you're feeling brave and want to go after the bugger, we can point
> you to plenty of helpful resources on the web.
> ---
> Leonard Grey
> Errare humanum est
>
> JasonH wrote:
> > I have a client with Windows XP Home SP2. His machine was infected with a
> > virus that corrupted explorer.exe and svchost.exe. We have the virus
> > quarantined and the system has been scanned to ensure no other files have
> > been infected. I have XP SP2 on CD and would like to extract them from the
> > CAB files. I believe the next course of action is to restore explorer.exe
> > and svchost.exe. System Restore is not an option because the customer
> > disabled it. However, I have not done this before. Can someone point me to
> > an article describing how to do this? Also what CAB files are these two
> > files located in.
> >
> > You're help is greatly appreciated,
> >
> > Regards,
> > Jason
> >> Stay informed about: System File Restore 
FAQ
Search
Profile
Private Messages
Log in
