Symantec AntiVirus detects Sfc.dll as Infostealer.Banpaes
Question/Issue:
Symantec AntiVirus detects the file Sfc.dll as Infostealer.Banpaes. After Symantec AntiVirus deletes the file, you are prompted to restart the computer. After you restart the computer, the computer restarts continuously. Computers that run Windows 2000 may show a blue screen with an error message.
Solution:
Follow the directions for your version of Windows.
Windows XP
Follow these directions to work around the problem on computers that run Windows XP.
To restore a clean copy of Sfc.dll
- Restart the computer in Safe Mode.
For directions, read Starting your computer in Safe mode.
- In Windows Explorer, open the %System% folder.
The default location is C:\Windows\System32.
- Copy the Sfc.dll file from the original Windows installation media to the %System% folder.
The default destination location is C:\Windows\System32.
- Restart the computer in normal mode.
Windows 2000
Follow these directions to work around the problem on computers that run Windows 2000. To perform these steps, you need the installation media for your language version of Windows and your
local administrator password. This password may differ from your domain administrator password.
To restore a clean copy of Sfc.dll
- Insert the Windows 2000 installation CD in your CD-ROM drive .
- Restart the computer.
You may need to press a key when requested to start from the CD.
- When you see the screen that says "Welcome to Windows Setup", press the F10 Key and follow the on-screen directions.
- Select the Windows installation to which you want to log on.
- Type your local administrator password.
- At the command prompt, type the command in the following format and then press Enter:
expand <CD drive letter>:\I386\SFC.DL_ <Folder or Drive to expand to>:\Sfc.dll
For example, if your CD Drive is D: and Windows is installed on the C: drive, type the following text and then press Enter:
expand D:\I386\sfc.dl_ c:\winnt\system32\Sfc.dll
- At the command prompt, type exit and press Enter to restart the computer.
Technical Information:
This problem does not affect computers that run Windows 9.x or Windows Me.
Document ID: 2006102011570548
Last Modified: 10/20/2006
Date Created: 10/19/2006
Operating System(s): Windows 2000, Windows XP Home, Windows XP Professional Edition, Windows 2000 Professional, Windows 2000 Server
Product(s): Symantec AntiVirus 10.1, Symantec AntiVirus Corporate Edition 10.0, Symantec AntiVirus Corporate Edition 8.0, Symantec AntiVirus Corporate Edition 9.0, Symantec Client Security 3.0, Symantec Client Security 3.1
Release(s): SAV 10.0 [All Releases], SAV 8.0 [All Releases], SAV 9.0 [All Releases], Symantec AntiVirus 10.1, Symantec Client Security 3.1 [All Releases], Symantec Client Security 3.x [All versions]
Cart
PRINT THIS PAGE