Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I did a really stupid thing when trying to fix a ransomware problem on a Win XP SP3 (Swedish) computer (Microsoft Defender Offline didn't work. Neither did Kaspersky recovery disc). Anyway at the time I believed that explorer.exe was infected. So to make a long story short I deleted it and tried to get it from another Win XP SP3 (swedish) computer. I eventually got rid of the ransomware but even though I copied the file from another swedish SP3 machine. Some text are in spanish (or some other language I don't know) which I do feel is very strange. What could the problem be?

share|improve this question
up vote 2 down vote accepted

Instead of copy the explorer.exe from another computer use the computers own cached version from c:\WINDOWS\System32\DllCache. You will not be able to do this when running Windows on that computer. You could do one of the two following things:

  1. Boot up the computer from some Linux Live CD (or a Windows PE environment) and overwrite the file.
  2. Put the harddrive in another computer and boot from it instead and then copy the file.

It did work great for me.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .