Deleted Windows exe files

[seedubya]

Hi all,

I have a Vista SP1 system here which got infected with something and the antivirus deleted a few dozen exe files. 3 of those were IE7, Media Player 11 and Windows Mail. I can't use system restore because it was infected and I had to dump the restore points, SFC doesn't see a problem, reinstalling IE7 and WMP11 doesn't work because it says newer versions are already installed.

Anyone got any ideas.

TIA

CW

 

[TimeCode]

Have you tried file recovery with something like File Scavenger?

Demo file will see what is available but you'll need to buy the full version to recover them...

 

[seedubya]

Sorry Tim, I forgot to say that the files defintely were infected and could not be disinfected so recovering them is just going to re-infect the PC.
If you know of a way to disinfect GDB will get them back no problem for me.

Do you think this might work - recover the files - THEN run SFC and have it (hopefully) replace them? Althought the fact that it hasn't noticed that they're missing on the first run may be a major hole in that theory.

 

[TimeCode]

I completely misread your first post. Sorry. You're right, that doesn't seem plausible.

What if you run "Windows installer Cleanup" then uninstall the programs and reinstall them?

 

[seedubya]

They can't be uninstalled from Vista, unfortunately.

 

[abe]

hi seedubya,

try a repair install using a vista sp1 dvd insert while vista is running and choose to upgrade.

guide is here http://www.vistax64.com/tutorials/88236-repair-install-vista.html

Abe

 

[seedubya]

Thanks Abe, I'd been trying to avoid that. Not that it's difficult but it just seems stupid to do repair install for the sake of 3 exe files. That being said there doesn't seem to another way. Nice link by the way.

 

[daeemann]

can you try mounting the vista wim image in the dvd using imagex then copying files to your windows directory.

use this tutorial if you need help
http://4sysops.com/archives/how-to-mount-a-wim-image-with-imagex-in-windows-vista/

 

[arrow_runner]

If it's just 3 exe files, why not extract them from the vista cab files or the Microsoft MSI files and put them where they should go? It may or may not work, but then you could try SFC like you were thinking?

 

[seedubya]

In the end I copied them from a fully patched SP1 system and all is well.