restoring a file in ME

Status
This thread has been Locked and is not open to further replies. The original thread starter may use the Report button to request it be reopened but anyone else with a similar issue should start a New Thread. Watch our Welcome Guide to learn how to use this site.

winkpc

Thread Starter
Joined
Nov 4, 2001
Messages
15
My virus scanner identified a w32/hybris.gen virus in one of my files and said it couldn't delete it, so I looked up the directions on how to delete it from ME and did. When I went to restore the file (again following the dir. from the virus program) through msconfig, ME told me that it was a protected file and can't be accessed. A search shows it listed in system files even though I thought I deleted it, and I am not aware of any problems and the last scan came up clear. So what happened? Did I actually delete this file or not? Or should I just quit worrying since it all seems to work just fine? What is a wsock32.dll file anyway? Since I can't seem to access it, does that mean a virus can't either?
 

TonyKlein

Malware Specialist
Joined
Aug 26, 2001
Messages
10,392
You need Wsock32.dll to access the internet, and it's a favorite target of many viruses and worms.
In WinME system files are protected and you need to go to Msconfig's startup tab to uncheck Statemgr and PCHealth, and subsequently reboot, in order to be able to delete, replace or rename them.

I don't think a virus will be much inconvenienced, though, and it's wise to restore the original file from your Windows CD-ROM.

Good luck,
 

winkpc

Thread Starter
Joined
Nov 4, 2001
Messages
15
I tried what you suggested and it let me go a little further. Asked for more info but then still told me the file was protected and wouldn't let me access. I have found a removal instruction on windows knowledge center but am still confused as to whether or not I really have to restore this file as it is still in there, the scans come up clean and I'm not having problems with accessing the net. Also I don't have a Windows CD-Rom for ME. It was installed on the PC when I bought it. I'm sure I did delete it the first time but it's still there. Did System File Protection replace it?
 
Joined
Oct 23, 2001
Messages
221
I had the same problem not to long ago. What you need to do is go the registry and see if the virus is there. If you have no experiance with registry I would suggest that you ask some one with more experiance how to do it step by step. Do you have a recovery cd?

If you do and you dont mind reinstalling the system I would say that would definately take care of it.
 

Bryan

Bryan
Joined
Jul 3, 1999
Messages
11,943
See if <a href=http://support.microsoft.com/support/kb/articles/Q265/3/71.ASP> this</a> helps. For that particular file your going to want to boot to your Windows ME boot diskette and then from the command prompt type in the following and press enter.

EXT

Follow the prompts to extract a new copy of wsock32.dll

BTW, your Windows ME cabs files from the CD should be located at either c:\windows\options\install or c:\windows\options\cabs
 

winkpc

Thread Starter
Joined
Nov 4, 2001
Messages
15
Problem Solved. The file is finally restored and I learned way more than I want to know about the inside of this computer! Thanks very much to all of you who responded with help.
 
Status
This thread has been Locked and is not open to further replies. The original thread starter may use the Report button to request it be reopened but anyone else with a similar issue should start a New Thread. Watch our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

No members online now.
Top