• Coffee House
  • Virus this morning - do I have a problem? (p.2)
2012/07/09 15:09:29
Jonbouy
Here's one which is basically saying the same thing as I did.

http://answers.microsoft....4a8e-9171-3d735dc5efde

copy c:\windows\system32\dllcache\sfc_os.dll   c:\windows\system32
2012/07/09 15:17:33
jamesg1213
Nope the sfc_os.dll is missing from system32 and the dllcache. I'll have a search for my disc, if not I'll take you up on that kind offer JB, thanks a lot for that.
2012/07/09 15:19:36
jamesg1213
Thanks Beepster
You can accidentally delete something important if you don't know what you are doing.
..might be best to leave that alone in my case..;-)
2012/07/09 15:27:35
Wookiee
Once you have the file I would run a boot time scan as well.  This should stop anything new appearing, fingers crossed.
2012/07/09 15:28:43
jamesg1213
Just ran a search for the sfc_os.dll, and found one in C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e...whatever that is...should I copy this into the system32 folder?
2012/07/09 15:43:12
Wookiee
jamesg1213


Just ran a search for the sfc_os.dll, and found one in C:\WINDOWS\SoftwareDistribution\Download\cf8ec753e88561d2ddb53e183dc05c3e...whatever that is...should I copy this into the system32 folder?

As long as it of a reasonable date and prior to your infection.
2012/07/09 15:43:42
jamesg1213
Copied the file back into system32, Windows boots up normally now. Thanks again!
2012/07/09 15:56:03
jamesg1213
As long as it of a reasonable date and prior to your infection.
Properties shows it originates from 2008 Wook, hopefully that's genuine.
2012/07/09 16:09:01
Jonbouy
jamesg1213



As long as it of a reasonable date and prior to your infection.
Properties shows it originates from 2008 Wook, hopefully that's genuine.


yup that's the fella!!! It's from the Service Pack.

put a spare back in the dllcache too.

Do that SFC /scannow and it will replace it anyhow if it is a wrong 'un.

Doing that will also change the system registry back to the defaults for the system files included in the scan also, which may alter some of the customised behaviour you've set up since installation but it will ensure that any malware hasn't made any changes to file pointers to do with the system.

2012/07/09 16:10:09
jamesg1213
Will do Cap'n Jon, you da man.
© 2025 APG vNext Commercial Version 5.1

Use My Existing Forum Account

Use My Social Media Account