Fix for Trojan.Patchep!sys or Dropper.Generic_c.MMI


By: kuttus
July 20, 2012

To Fix for Trojan.Patchep!sys or Trojan horse Dropper.Generic_c.MMI Follow these steps:

Method #1

This will replace the infected services.exe with the original.

In Windows 7 and Vista

Step 1. Go to Start Menu and Inside the Search box type CMD.

Step 2. Now at the Top side if the Start menu you can see one file Called CMD.

Step 3. Right Click on that one and Select the Option RUN AS ADMINISTRATOR


In Windows XP

Step 1. Go to Run and  type "cmd" to open the command prompt

Step 2. Now you will get a black Window. Inside that black window type the above commands.

Step 3. Type or copy & paste "sfc /scanfile=c:\windows\system32\services.exe" and press enter

Step 4. Restart your computer


Method #2


We can replace the infected file with a Good one. That means we need to replace the file c:\windows\system32\services.exe with a good one. 

How to manually replace the file ?

Step 1. Boot the computer in Safe Mode With Networking or Recovery Console.

Step 2. Search the file "services.exe" file in "c:\Windows\winsxs" folder and copy the file to "c:\".
Note: services.exe should be 321 KB

Step 3. Open the folder "c:\windows\system32″ rename the file "services.exe" as "123.com"

Step 4. Launch the cmd prompt with administrator rights and navigate to home drive "c:\"

Step 5. Type the following cmd "copy services.exe c:\windows\system32″ and you should get a message "1 file copied".

Step 6. Restart the computer in normal mode.

Step 7. Delete the file "123.com" from system32.


Need more help?
Describe your Problem
Example: Hard Drive Not Detected on My PC

Ask Question