Re: Suspect Virus-USER 32.DLL




"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:uKssOBJaJHA.5772@xxxxxxxxxxxxxxxxxxxxxxx
From: "Geoff" <geoff@xxxxxxxxxxxxxxx>

| On Sat, 27 Dec 2008 11:52:01 -0500, "David H. Lipman"
| <DLipman~nospam~@Verizon.Net> wrote:

Copy the file 'user32.DLL' from

%windir%\ServicePackFiles\i386

to

%windir%\SYSTEM32


| Can't be done on a live system. The DLL is locked.

| Suggest GiPo Utilities MoveOnBoot:
| http://www.gibinsoft.net/gipoutils/

| Allows movement/copy of files at system boot before the system locks
things
| like DLLs.

But can be done in the Recovery Console or on a surrogate PC.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


Dave
Recovery Console is still under consideration - I will research it in MS.

Antioch


.