Help I ve Got a Virus

[t92300]

Help I have a Virus
Operating sys Win95
Dos Ver 5
Virus strain 1 name W32.Magistr.24876@mm
Virus strain 2 name PE_Magistr.A
Can any one tell me how to remove it please!!
Have McAfee Virus Scan 4.0.3
Scan engine 4.0.02
Definitions 4.0.4145

Any help much appreciated thanx
t92300

 

[CornMaster]

I'll do a little research for you, but what are the symptoms???
Have you tried a scan and clean it?
If you can go online try: http://housecall.antivirus.com and do an online scan. That should clear up just about everything.

I'll be back in a few if I can find anything else.

------------------
<IMG SRC="http://images.honesty.com/imagedata/h/207/85/32078598.gif" border=0> I AM CANADIAN! <IMG SRC="http://images.honesty.com/imagedata/h/207/85/32078598.gif" border=0>
CivFanatics Moderator and Tech Support
CornEmpire Owner/Operator
My Civ 2 Scenario Page.

 

[CornMaster]

Holy ****ing ****!!!!!!!!!!!!!!
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=PE_MAGISTR.A

From what it can do.....I think your screwed!!!

From the website
It compares the time stamp of its viral DAT file with the current system time of the infected computer. On the system date one month after the first infection, in Windows 9x (95/98) operating systems, it erases CMOS data, Flash memory (BIOS EEPROM), and the hard disk drive. The virus only exploits the security vulnerability in Win9x systems to grant itself Ring-0 priveleges, thus, its destructive payloads do not affect computers in Windows NT and 2000 environments.

At least I'm safe with Win2k

, but you want to clear that up ASAP!!! How long have you had it??? After a month it will erase your BIOS, CMOS, and hard drive!!!!!!!

Go to that site ASAP and scan your computer!!!

This kind of virus makes me afarid.....very afarid!!!!

------------------
<IMG SRC="http://images.honesty.com/imagedata/h/207/85/32078598.gif" border=0> I AM CANADIAN! <IMG SRC="http://images.honesty.com/imagedata/h/207/85/32078598.gif" border=0>
CivFanatics Moderator and Tech Support
CornEmpire Owner/Operator
My Civ 2 Scenario Page.

 

[GenghisK]

that's why <FONT COLOR="blue">Ma</FONT c><FONT COLOR="red">CiN</FONT c><FONT COLOR="green">toSh</FONT c> <FONT COLOR="orange">Ru</FONT c><FONT COLOR="yellow">LeZ</FONT c>

 

[CMH]

the mac does rule

my philosiphy is this: the people who know how to write viruses for the windows dont know how to write them for mac, and everyone who has a mac loves the computers too much to write a virus for them.

 

[t92300]

Hi
my internet connection does work as you can see if you are reading this

I found out about the virus when I checked my 2 email accounts and found 2 emails from my parents email account (its their computer thats infected) It looked a little suspicious so I checked their email account and there was all these emails that were returned with attachments some of the ISPs returning the mail said they had detected a virus thats how I found out.

I have only had the virus a couple of days

So far I have ran a cleaner programme from www.sophos.com 22 files found were infected the first time following times 0 infected files found

Symptoms typical Win95 ones ie Windows freezing a little more than normal

When my parents go into town tomorrow they are going to get the latest norton anti virus the shops got so hopefuly it will be gone in few days

Corn I am checking out site you gave me now

any more help appreciated thanx

t92300

[This message has been edited by t92300 (edited July 03, 2001).]

 

[t92300]

have run the scanner at http://housecall.antivirus.com a couple of times 10 joke viri found

how do I really know that the Magistr virus is relly gone?

 

[GenghisK]

My poor friend, there's no way to know that... until... it's too late. Well first worry less for your HD than for your MB. Once I got such a virus and removed the MB battery for 2 days. I didn't heard of this virus since. But I'm not sure it will work for the newest ones. They can flash themselves permanently so removing the battery *may* be useless.
Conclusion: always have an antivirus running in bckgrnd. It slows a bit your pc down but it's essential.

------------------
<IMG SRC="http://www.ifrance.com/genghisk/GKultima.gif" border=0>

 

[t92300]

I have found the viruses main dat file should I delete it
any one know what might happen
found and deleted registry entry (stops virus from running on startup) and deleted the main file the virus is in

 

[CornMaster]

I say go for it!!!

But I would check a few more sources first. Research is the key!!!

------------------
<IMG SRC="http://images.honesty.com/imagedata/h/207/85/32078598.gif" border=0> I AM CANADIAN! <IMG SRC="http://images.honesty.com/imagedata/h/207/85/32078598.gif" border=0>
CivFanatics Moderator and Tech Support
CornEmpire Owner/Operator
My Civ 2 Scenario Page.

 

[t92300]

http://www.symantec.com/avcenter/venc/data/w32.magistr.24876@mm.html
found this site was some help (the site for norton antivirus)just got norton antivirus and yes it is suppossed to remove so I run norton antivirus wait 1 month and then I know its gone bye bye virus