Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
system32 virus
Name: btunney Date: September 29, 2003 at 06:16:24 Pacific OS: win xp pro CPU/Ram: 1ghz/256 mb
Comment:
I have a virus in my System32 file called sifsrwh.exe Can I extract this from my winXP CD or how can I reinstall this cab file? I am not having any problem except Norton will not let me quarentine the virus. THX
Name: Tufenuf Date: September 29, 2003 at 06:21:36 Pacific
Reply:
What is the name of the virus that Norton picked up?
Tufenuf
0
Response Number 2
Name: keef444 Date: September 29, 2003 at 06:46:10 Pacific
Reply:
system32.exe IS a virus - it isn't a standard XP file.
The reason Norton can't remove it is because it is currently 'in use'.
Open Task Manager and stop the process - if it says 'Access Denied' then re-start the PC in safe mode and find/delete system32.exe
This file might be listed to run in the registry, so go to HKLM>Software>Microsoft>Windows>CurrentVersion>Run in the registry (RUN regedit) and delete any entry for system32.exe in the right pane.
GoodLuck
0
Response Number 3
Name: ranchhand Date: September 29, 2003 at 07:26:26 Pacific
Reply:
Keef is right on the money. Follow his suggestions and there is no virus that will be able to outwit you, especially restarting in Safe Mode. Since Windows is configured to load only the basic drivers needed and nothing else, the Virus can't load up and give you the "access denied" or "in use" message. It is helpless and you can nail it.
Summary: Believe it or not, your comments helped. I did a FULL TEST from pc pitstop and yes... it did find a system32 virus--something NORTON didn't find. I re-updated Norton and did another full scan with i...
Summary: Hi. Had virus. Removed it. Deleted registry key. System now runs very slowly. Can anyone help? Logfile of HijackThis v1.97.5 Scan saved at 15:34:02, on 29/12/2003 Platform: Windows XP (WinNT 5.01.26...
Summary: I keep getting the following message from my anit-virus (Sohpos). "Virus Troj/ConHook-J detected in: "C:\Windows\system32\Hdauexx.dll" Disinfection unavailable" I know this dll file is part of an au...
0 
