Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Extract Files from Windows 7 Installation DVD

19 May 2012   #40

Windows 7 Professional x64
size2_rl.cur, size2_rm.cur

Hey Brink,

Long time reader, first time writer.

I recently came in contact with a rootkit called Sirefef.EZ & Sirefef.AD, which took down my Windows Firewall and broke some of the services used to start it, like Base Filter Engine. The service comes back as "Access is Denied" or "Dependency failed to start". After checking SFC for integrity violations, I was a sad panda to find out some files had been altered. As much as I hate System Restore, I went back 48 hours prior to the incident. Unfortunately, the problem still exists. I followed your tutorial and have a list of the broken files and 7-Zip is up with the disc readily accessible. Please let me know what files need to be retrieved.
I also have a Best Buy Geek Squad MRI PE disc that I will use to copy over original files.

Thanks in advance!

- Awwtbone

Attached Files
File Type: txt sfcdetails.txt (77.7 KB, 103 views)
My System SpecsSystem Spec
19 May 2012   #41

Microsoft Community Contributor Award Recipient

Windows 7 Ult. x64

Hello and welcome awwtbone,

I would recommend a clean install instead of trying to fix the current installation, because of the extent of the rootkit infection.

Clean Install Windows 7

My System SpecsSystem Spec
19 May 2012   #42
Microsoft MVP

64-bit Windows 8.1 Enterprise

Hello Awwtbone, and welcome Seven Forums.

I agree with Golden. When it comes to a rootkit, I think it's best to format and start clean. Afterwards, do a full scan of your system with the free Malwarebytes just to be extra safe though.
My System SpecsSystem Spec
19 May 2012   #43

Windows 7 Professional x64

Thank you for the warm welcome.

You can love or hate Best Buy, but they have a virus eradication program all of their Geek Squad agents use. Most of the time the software is pretty worthless, but my copy managed to find the virus with their "Replication File Finder" which sweeps the MFT for malicious duplications. After the supposed removal, ESET and paid-for MalwareBytes couldn't find the rootkit anymore.
Even if the virus is still in my system and a clean install is required, I would like the future knowledge of thoroughly understanding the dynamics of repairing system files. Would you mind going through the process anyway? I would greatly appreciate it.

- Awwtbone
My System SpecsSystem Spec
19 May 2012   #44
Microsoft MVP

64-bit Windows 8.1 Enterprise


You would basically go through your sfcdetails.txt file to see what system files could not be fixed. Next, you would use this tutorial to extract a new copy from your retail type Windows 7 installation disc, and use the yellow TIP box at the bottom of this tutorial to replace the bad copy in Windows with the new copy.

Looking at your sfcdetails.txt file, these are the files that cannot be fixed. If you do not use these default cursors that are included in Windows, then I wouldn't worry about them.
  • C:\Windows\Cursors\size2_rl.cur
  • C:\Windows\Cursors\size2_rm.cur
  • C:\Windows\winsxs\amd64_microsoft-windows-shell-acccursors_31bf3856ad364e35_6.1.7600.16385_none_406675269603c3b4\size2_rl.cur
  • "C:\Windows\winsxs\amd64_microsoft-windows-shell-acccursors_31bf3856ad364e35_6.1.7600.16385_none_406675269603c3b4\size2_rm.cur
My System SpecsSystem Spec
08 Aug 2012   #45

Windows 7 Ultimate 64

Thank you, thank you, thank you. May you have as much as you want of everything you love.
My System SpecsSystem Spec
08 Aug 2012   #46
Microsoft MVP

64-bit Windows 8.1 Enterprise

You're most welcome Lestrad. I'm glad that it was able to help.
My System SpecsSystem Spec
09 Oct 2012   #47

Win 8 duals Win 7 64bit

Can we manually copy system files in Windows Repair Mode over the command prompt, because the system files are so corrupt that the PC won't boot at all? The reason is that I don't want the whole drive C: formatted with clean Windows 7 and lose personal files just because a few vital files are missing.
My System SpecsSystem Spec
09 Oct 2012   #48
Microsoft MVP

64-bit Windows 8.1 Enterprise

Hello Dorruk,

Yes, you could do that.

However, if it's only bad system files, you might see if you may be able to run a sfc /scannow command at boot using METHOD TWO in the tutorial below to see if it may be able to repair them automatically for you.
SFC /SCANNOW : Run in Command Prompt at Boot
If you do end up needing to do a clean install to fix this, then you could use either tutorial below to copy and paste any needed files from your system to another location before doing so.
Copy & Paste - in Windows Recovery Console

Hope this helps,
My System SpecsSystem Spec
15 Nov 2012   #49

Windows 7 Home Premium x64

Hi Brink,

Does doing this will affect my installed programs, drivers and user settings or it will just repair all the bad system files on my computer?

What will you recommend if i just want to repair all the bad system files that /sfc scannow cant repair? This tutorial or Repair Install?
My System SpecsSystem Spec

 Extract Files from Windows 7 Installation DVD

Tutorial Tools

Similar help and support threads for2: Extract Files from Windows 7 Installation DVD
Windows 7 Tutorial Category
Backup - Manually Extract Files from in Vista & Windows 7 Tutorials
How do i extract my product key from windows.old files Windows Updates & Activation
How to extract files from MIG Installation & Setup
how to extract files from .msi package? BSOD Help and Support
Extract .iso files? Software
No extract option for zip files General Discussion
Can't extract any files General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 15:15.
Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App