sfc /scannow doesn't copy system32.exe?

Hi,

My AV detected a virus back door (system32.exe) and deleted the file. I used sfc /scannow to restore its integrity and system32.exe wasn't copied and many for more dll files weren't copied back into my box. Are there other ways to fix this??

Regards,

Heliux

 

I believe system32.exe was the virus itself, and not a system file, click here for more info on this. Virus creators use trick names like this, another is Winlogin.Exe, where the real file is Winlogon.Exe. They wouldn't use a name like Virus.Exe.
Just what are the names of the DLL files, and their folder locations?

 

The system file c:\winnt\system32\digirlpt.dll could not be copied into the DLL cache. The specific error code is 0x0000000d [The data is invalid.
]. This file is necessary to maintain system stability.

and many more weren't able to be copied back

\digilan.sys
\digiisdn.sys
\digifep5.sys
\digidxb.sys
\digiisdn.dll
\digiinf.dll
\digihlc.dll
\digifwrk.dll
\digidbp.dll
They're all in the same folder c:\winnt\system32. I hope that helped

Regards,

Heliux