PDA

View Full Version : system files in XP Pro


Nev
December 14th 03, 03:29 PM
Is this file: "win32sockdrv.dll" a (genuine)required
windows system file in XP PRO?
It is located in the directory C:\windows\system32\

1. How can it be replaced/refreshed in XP Pro if it is?
2.How can I erase it if it is not?
3.Any other advice is welcome

Background info:I am informed by "Stinger" from Network
Asssociates Inc. that it found the "Exploit-DcomRpc
trojan" in the file, but it cannot repair the file. I
cannot replace the file using the "Recovery console"
because it cannot be found on my XP Pro installation CD.
I tried unsuccessfully to delete the file (access
refused)

My computer is firewall protected and all the current
security and critical patches are installed. For all
intents and purposes the computer is presently working
fine.

Doug Knox MS-MVP
December 14th 03, 03:29 PM
No, its a virus.

http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.e.html

Its also been associated with the Spybot worm.
--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Nev" > wrote in message
...
>
> Is this file: "win32sockdrv.dll" a (genuine)required
> windows system file in XP PRO?
> It is located in the directory C:\windows\system32\
>
> 1. How can it be replaced/refreshed in XP Pro if it is?
> 2.How can I erase it if it is not?
> 3.Any other advice is welcome
>
> Background info:I am informed by "Stinger" from Network
> Asssociates Inc. that it found the "Exploit-DcomRpc
> trojan" in the file, but it cannot repair the file. I
> cannot replace the file using the "Recovery console"
> because it cannot be found on my XP Pro installation CD.
> I tried unsuccessfully to delete the file (access
> refused)
>
> My computer is firewall protected and all the current
> security and critical patches are installed. For all
> intents and purposes the computer is presently working
> fine.

December 14th 03, 03:33 PM
Your help is much appreciated Doug. All is well now.
Nev

Doug Knox MS-MVP
December 14th 03, 03:33 PM
:) Glad to help!

--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

> wrote in message
...
>
> Your help is much appreciated Doug. All is well now.
> Nev

Google