restoring a file in ME

[winkpc]

My virus scanner identified a w32/hybris.gen virus in one of my files and said it couldn't delete it, so I looked up the directions on how to delete it from ME and did. When I went to restore the file (again following the dir. from the virus program) through msconfig, ME told me that it was a protected file and can't be accessed. A search shows it listed in system files even though I thought I deleted it, and I am not aware of any problems and the last scan came up clear. So what happened? Did I actually delete this file or not? Or should I just quit worrying since it all seems to work just fine? What is a wsock32.dll file anyway? Since I can't seem to access it, does that mean a virus can't either?

 

[TonyKlein]

You need Wsock32.dll to access the internet, and it's a favorite target of many viruses and worms.
In WinME system files are protected and you need to go to Msconfig's startup tab to uncheck Statemgr and PCHealth, and subsequently reboot, in order to be able to delete, replace or rename them.

I don't think a virus will be much inconvenienced, though, and it's wise to restore the original file from your Windows CD-ROM.

Good luck,

 

[winkpc]

I tried what you suggested and it let me go a little further. Asked for more info but then still told me the file was protected and wouldn't let me access. I have found a removal instruction on windows knowledge center but am still confused as to whether or not I really have to restore this file as it is still in there, the scans come up clean and I'm not having problems with accessing the net. Also I don't have a Windows CD-Rom for ME. It was installed on the PC when I bought it. I'm sure I did delete it the first time but it's still there. Did System File Protection replace it?

 

[perseous]

I had the same problem not to long ago. What you need to do is go the registry and see if the virus is there. If you have no experiance with registry I would suggest that you ask some one with more experiance how to do it step by step. Do you have a recovery cd?

If you do and you dont mind reinstalling the system I would say that would definately take care of it.

 

[Bryan]

See if <a href=http://support.microsoft.com/support/kb/articles/Q265/3/71.ASP> this</a> helps. For that particular file your going to want to boot to your Windows ME boot diskette and then from the command prompt type in the following and press enter.

EXT

Follow the prompts to extract a new copy of wsock32.dll

BTW, your Windows ME cabs files from the CD should be located at either c:\windows\options\install or c:\windows\options\cabs

 

[winkpc]

Problem Solved. The file is finally restored and I learned way more than I want to know about the inside of this computer! Thanks very much to all of you who responded with help.