Hi all,
I am recovering from a nasty trojan and have all worked out but have been asked to get a few clean files.
I need to download or zipped and e-mailed to me the following from windows xp professional with sp3.

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\syste m32\services.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system 32\svchost.exe
C:\WINDOWS\system32\winlogon.exe

Any help where to go or if any member would be kind enough to help and send I would greatly appreciate.
Thank you.

Try this to replace your missing system files.

You will need to put your Win XP cd in the drive first.

Then go to Start / Run and paste this in press OK.

Let it do it's thing, and when it's finished remove the cd and then restart your computer...

My files are not missing they are infected, I have been on hijack this fourms and we have solved everything and was told to find someone with same op system and get a copy of these files so we can replace mine.

OK I will upload them for you.

Make sure that you scan them with your AV app, they have been scanned with Nod32 4.0.314.0 and are clean.

I hope this will fix your problem...

http://www.members.optusnet.com.au/~wombat1945/Sys_Files.zip

Hello mm35, Welcome to PC Help Forum. If your Windows install CD is clean then you can restore those files from it as per Arctos's instruction. You should never get these files from an unknown place because you risk reinfection.

LC

Yes I agree but of course I would submit them first to check.
But doing as Arctos's suggested how will it detect since the files are not missing ? there is a little code attached and it was very hard to find, most all my scans did not report this until I used a kernosoft program.
I guess my question is will it replace the existing files ?

Arctos's are you running xp pro sp3 ????


Thank you for your help

Yes, I have the all of the latest service packs and security patches on Win XP...