How do I disinfect or overwrite services.exe?

Question

Windows Defender Offline detected services.exe as being infected by Trojan:Win64/Sirefef.Y. The recommended action was to remove it, which is what i chose to do. But it failed, returning the error code 0x800704ec (blocked by a group policy).

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?name=Trojan%3aWin64%2fSirefef.Y&threatid=2147655285

Is there a way for me to manually overwrite the services.exe file with a healthy copy using my Windows disk?

Answer 1

I am not sure if you can do this just with the windows disc, but you can boot something else than just the infected windows install or the windows DVD and overwrite the file.

E.g. a liveCD with Linux, Hiren's bootCD, sysinternals ERD commander, ....
Or even an other computer (just make sure that that one is up to date so it does not get infected).