Need help to fix corrupt Beep.sys

[Castout]

I ran sfc /scannow and it found several system file corruption but unable to fix some of them.

It turned out to be the beep.sys

Somehow that file is corrupted. Can anyone advise me how to fix this?

A snippet of CBS.log

POQ 117 ends.
2011-02-06 16:01:25, Info CSI 000002d7 [SR] Verify complete
2011-02-06 16:01:25, Info CSI 000002d8 [SR] Repairing 1 components
2011-02-06 16:01:25, Info CSI 000002d9 [SR] Beginning Verify and Repair transaction
2011-02-06 16:01:25, Info CSI 000002da Hashes for file member \SystemRoot\WinSxS\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_20159 2fa214e4f02\beep.sys do not match actual file [l:16{8}]"beep.sys" :
Found: {l:32 b:HDq3Unfzm0OfCylVbivf7zXO4ZkHmYvtYyXCUpGdo3g=} Expected: {l:32 b:d8AIrtsH+sZkE4QdZclS3bVv59yl6e+cj0EwM2uDgCQ=}
2011-02-06 16:01:25, Info CSI 000002db [SR] Cannot repair member file [l:16{8}]"beep.sys" of Microsoft-Windows-BeepSys, Version = 6.1.7600.16385, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken

[Jan Kyster]

It's part of your infected system. Beep.sys has been hijacked...

How valuable is your time?
Or in other words: it's much faster doing a clean sweep... of course you have a backup from your first clean, tested and working setup? :shifty:


Or do a fresh Windows with full format (unless using SSD), enable Windows Firewall and use MSE = no more nasty stuff...



Have a nice sunday! http://i189.photobucket.com/albums/z15/subject_rod/smilies/biggrin.gif

[Castout]

It's part of your infected system. Beep.sys has been hijacked...

How valuable is your time?
Or in other words: it's much faster doing a clean sweep... of course you have a backup from your first clean, tested and working setup? :shifty:


Or do a fresh Windows with full format (unless using SSD), enable Windows Firewall and use MSE = no more nasty stuff...



Have a nice sunday! http://i189.photobucket.com/albums/z15/subject_rod/smilies/biggrin.gif


I have firewall my system is always protected! I'm sure it was manual hacking and it is going to be repeated even after another clean install.

[Jan Kyster]

:o you mean, hacked by people having access to your pc?

Force user login and limit their rights. Or user the Guest account... should do the trick.

[Castout]

:o you mean, hacked by people having access to your pc?

Force user login and limit their rights. Or user the Guest account... should do the trick.


I alreay use UAC and I have passwords for both standard user and admin type user!

You don't think that a firewalled PC is immune to manual hacking do you?!

Heck even people hacked into NASA computers from time to time. Desktop PC doesn't stand a chance using on the shelf security app :haha:

[Castout]

I wonder if it has anything to do with my custom theme. I've downloaded some custom themes from MS site. They may have changed the beep.sys? :88)

MBAM scan is clear. COMODO scan is clear, HijackThis check is all good . . .