System File Restore

[JasonH]

I have a client with Windows XP Home SP2. His machine was infected with a
virus that corrupted explorer.exe and svchost.exe. We have the virus
quarantined and the system has been scanned to ensure no other files have
been infected. I have XP SP2 on CD and would like to extract them from the
CAB files. I believe the next course of action is to restore explorer.exe
and svchost.exe. System Restore is not an option because the customer
disabled it. However, I have not done this before. Can someone point me to
an article describing how to do this? Also what CAB files are these two
files located in.

You're help is greatly appreciated,

Regards,
Jason

 

[Leonard Grey]

I can assure you that the infection is not limited to two files.

Your courses of action here are: a) identify the infection (if possible)
and remove it (if possible); or 2) erase the hard disk and start over.

If you're feeling brave and want to go after the bugger, we can point
you to plenty of helpful resources on the web.

 

[JasonH]

You are correct, it wasn't limited to two files. But it was limited to these
two specific system files. We used a command line scanned to identify and
remove the virus from the system. The two files I listed below are the
system files it quarantined. I do not want to use these files, and thus is
why I am asking for help on restoring them from a CAB.

 

[PaulM]

How to use Extract.exe to copy files from the cabinet files

http://support.microsoft.com/kb/132913

 

[JasonH]

Thanks PaulM! Would you or anyone know which CAB files have the two files I
am looking for? Thanks!

 

[PaulM]

The files should be in the i386 folder.

--
Paul's XP and Vista Tweaks
---------------------------------------
www.paulsxp.com

Paul's XP and Vista Help Forum

 

[Mark L. Ferguson]

It may be easiest to let the wizard in MSCONFIG do the finding. Start/run,
type: msconfig, click the "Expand File" button, browse to the Existing
files, OK, then browse if necessary, to the i386 folder with the cab files.

--
Use the "Ratings" feature. It helps the new users.
Please use the Communities guidelines when posting.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm
Mark L. Ferguson MS-MVP
https://mvp.support.microsoft.com/profile/Mark.Ferguson