Member Avatar for hisoka

hello to all.

i just got infected by n.downloader virus which was successfully cleaned by my mcafee.
the problem is it deletes many windows progs such as cmd.exe, helpctr.exe, paint, wordpad...

Mcafee deleted those programs because it was infected by virus....

My question is how can I recover or can i just copy that progs from other working computer?

thanks...

  • 3 Contributors
  • 5 Replies
  • 126 Views
  • 7 Hours Discussion Span
  • Latest Post Latest Post by Suspishio

Dani AI

Generated

Brief, practical recovery notes that build on what reported and on suggestions from and .

This situation has two separate problems: making sure the machine is actually clean of malware, and restoring system files and registry entries in a consistent way. Back up or image the drive before trying fixes so experiments are reversible.

First steps (safety and verification)

  • Isolate the PC from networks and run an independent, offline rescue scan (bootable rescue media or a second-opinion scanner) to confirm no active infection remains. Restoring system files while malware is still present will only re-break them.
  • Check the antivirus quarantine/history. If the AV moved originals to quarantine, restoring a known-good copy from quarantine can be the fastest recovery — but only if the AV report shows it was quarantined as infected and there is reason to believe a clean copy exists.

Repair tools and commands

  • Use Windows built-in integrity tools. From an elevated Command Prompt (or WinRE/Repair environment if cmd.exe is missing), run:
sfc /scannow
  • On Windows 8/10/11 (and corresponding servers) run DISM first, then SFC:
Dism /Online /Cleanup-Image /RestoreHealth
sfc /scannow
  • If the system cannot boot normally, run SFC offline from WinRE with the offline switches:
sfc /scannow /offbootdir=C:\ /offwindir=C:\Windows

When those fail

  • Use System Restore (if a pre-infection restore point exists) or perform a repair/in-place upgrade that preserves user data; these restore registry and system files together without a full wipe.
  • Copying executables from another PC is a last resort. Files must match the exact OS edition, build/service pack and architecture. Mismatched files can fail signature checks or break components. Permissions and registry registrations may also need repair.

Priority summary
Back up the drive -> ensure malware is removed -> check AV quarantine -> run SFC/DISM (or offline SFC) -> try System Restore or repair/in-place upgrade -> full reinstall only if those fail.

Recommended Answers

All 5 Replies

Member Avatar for Suspishio

When I fixed my daughter's laptop, nothing short of a full software rebuild (preceded by Format) could get back to a working state.

It didn't take me long to work out that I could spend the rest of my life trying by any other means.

Member Avatar for hisoka

i dont want to format my hd.
is there other way aside from formatting.
thanks...

Member Avatar for bobbyraw

i am going to assume you are runing some variant of windows. if u have the cd you can extract those programs back to there original directories here follow these instruction to get this done

Member Avatar for bobbyraw

if u dont have the cd get a copy from some one and extract each file to their respective directories.
NB u can also copy them if u can opn the cab file that each file is in.

Member Avatar for Suspishio

i am going to assume you are runing some variant of windows. if u have the cd you can extract those programs back to there original directories here follow these instruction to get this done

Problem with this is that if the Trojan messed with the Registry, you can load stuff back to the HDD till the cows come home and it still won't work.

Likje I said, this is one of those cases where you might need to cut your losses if a couple of tries at "quicker" fixes fail.

Nobody wants to format their HDD; but how sure are you that the Trojan really is removed? A Format deals with this. There should be no problem getting your files off the HDD if yoy still have WIndows Explorer functionality. If not, then putting the HDD into a USB enclosure and attaching it to another PC will enable you to get your data files off.

Anyway, good luck. Like I said, I had this problem and I fixed this problem. Not mucjh more I can add.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.