oceans11 Posted February 9, 2005 Report Share Posted February 9, 2005 Help! Had just installed & ran Kaspersky Personal Pro v. 5.0.18 for the 1st time. Among other things it claimed sysdebug32.exe (found in C:\WINDOWS\system32) was a virus (Trojan-Clicker.Win32.VB.dn). It wanrted to delete it. I didn't like the idea of it messing with system32 files so I tried to inspect t when all of a sudden it disappeared! Apparently the AV scanner thought I was trying to "rescue" it or something so it beat me to it. I have contacted Kaspersky support but they might not get back to me for days. I'm just running the trial. Freeloaders go to the bottom of the barrel. I'm afraid to reboot, it might not work. Can someone please tell me how (if possible) I can restore this file? I have a hard copy of SP-2 if that helps. :oops: Quote Link to comment Share on other sites More sharing options...
trackrat Posted February 9, 2005 Report Share Posted February 9, 2005 If you are still running (afraid to do a reboot), do a system restore to before you installed the AV. Quote Link to comment Share on other sites More sharing options...
oceans11 Posted February 9, 2005 Author Report Share Posted February 9, 2005 Thought of that, but system restore makes those backups too quick to actually make copies of files. The restore point is there, I could try it but I thought of another idea. Suppose I were to replace it with the same file from someone else's PC, running XP Pro SP-2. Ya think that might work? I'm nuts, huh? Quote Link to comment Share on other sites More sharing options...
ɹəuəllıʍ ʇɐb Posted February 10, 2005 Report Share Posted February 10, 2005 If you think that the thing is a system file, you can always run sfc to restore any lost system files.However, I do not have any file named sysdebug32.exe on my XP-SP2, so it is certainly not a Windows file. A Google search for "sysdebug32.exe" only returns results that are in some way or another connected to virus infections. Quote Link to comment Share on other sites More sharing options...
Soooozbear Posted March 7, 2005 Report Share Posted March 7, 2005 Am I to understand that sysdebug32 is not a WINNT file? Quote Link to comment Share on other sites More sharing options...
scuzzman Posted March 7, 2005 Report Share Posted March 7, 2005 Thought of that, but system restore makes those backups too quick to actually make copies of files. The restore point is there, I could try it but I thought of another idea. Suppose I were to replace it with the same file from someone else's PC, running XP Pro SP-2. Ya think that might work? I'm nuts, huh?You're correct - it doesn't make copies of the files. That's the beauty of a journalled filesystem (NTFS).More info on this here: Windows Server Hacks: Hacking System Restore (don't mind the title - it's part of the O'Reilly series)And no - copying it from someone else's PC probably won't work.Also - a Google search for sysdebug32.exe kind of confirms the trojan thing...See this result for details. Quote Link to comment Share on other sites More sharing options...
-pops- Posted March 7, 2005 Report Share Posted March 7, 2005 You mentioned System Restore backups above. Can I ask if you have any independent backups to another hard drive, CD, DVD or whatever?I am always encouraging people to make backups - they can be lifesavers when problems such as you are experiencing here come along. OK, people say "it can never happen to me". Perhaps you thought that yourself but, these things can and do happen with all too much frequency.Sorry I can't be of direct help here but, when things are sorted out, give some very serious consideration to preparing (and keeping updated) a full system backup. Quote Link to comment Share on other sites More sharing options...
scuzzman Posted March 7, 2005 Report Share Posted March 7, 2005 when things are sorted out, give some very serious consideration to preparing (and keeping updated) a full system backup.I concur fully here.While I don't have the spare change for a full backup (would require another HDD) I do keep my docuemts and stuff backed up onto a network drive. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.