PDA

View Full Version : Thanks Icarus. - It is the W95.MTX virus.


Sensible
18th Apr 2001, 02:40
Well done, thanks for the reply to my post. You named it in one! I cannot reply to any posts on PPRuNe although I am able to make new postings. Also, any attempt to contact an anti-virus site such as www.norton.com (http://www.norton.com) or www.Symantec.com (http://www.Symantec.com) causes my web browser to shut down. I've also tried to search for a cure using search engines including www.askjeeves.com (http://www.askjeeves.com) and www.google.com (http://www.google.com) all with identical results. Funny thing is that I can still access prety well any site other than PPRuNe posts and virus information sites! I obviously need to obtain appropriate software to remedy the problem. Any ideas for a painless as possible fix? I don't mind spending the cash as much as I dislike spending the time.
S

mutt
18th Apr 2001, 13:53
Sensible, this is from the Symantec site.

W95.mtx fix tool
What the tool does

After running the W95.MTX Fix Tool, all Web sites that were previously blocked will be accessible.
The tool scans for and repairs (where possible) infected files. If an infected file cannot be repaired (because it has been corrupted), then a message will appear to tell you. You will need to restore the damaged files from a backup or from the original distribution disks. The worm files are deleted if they are found.
The tool repairs the Wsock32.dll by removing the virus code. If Wsock32.dll is in use at that time, then a copy is made of Wsock32.dll and this copy is repaired. Then a Wininit.ini file will be created and a request to reboot will be made after scanning is complete. When the computer is rebooted, the Wsock32.dll will be replaced with the clean copy.

If you cannot get to that site, you should be able to obtain it from the following Tucows site:

http://tucows.colusanet.com/preview/161283.html

If it is not available at this specific Tucows site:

1. Go to http://www.tucows.com.
2. In the Search Software Library box at the at the top of the page, type the following and click Go!:

fixmtx

3. Click Download Now!
4. Choose a region and a State or Country, and then click Go!.
5. Click the mirror link that is closest to your location.
6. Save the file to the Windows desktop.

Failing all that, leave a message here and i will email the fix-tool to you, its around 200k.

All the best.

Mutt. :)

Oops, i forgot that you cant post replies, email me at mutt2pilot.pprune.com if you want a copy of the fixtool.


[This message has been edited by mutt (edited 18 April 2001).]

FJJP
22nd Apr 2001, 12:22
When you get your machine cleaned, I recommend Norton Anti-Virus 2000 from Symantec. I downloaded that + Cleansweep + Norton Utilities + Internet Security (all about £30-ish each). The Anti-Virus software reminds me to download updates every 10 days (annual renewal recently for £2.50) and also reminds me to update the rescue disks every 2 weeks or so.

When you install the Anti-virus software, it prompts you to create the rescue disks (8x1.44mb floppies). If you get a virus (because, for example, you turned off the Anti-Virus software and forgot) you boot up from cold using the rescue disks. Following the instructions will allow a clean boot followed by removal and disinfection of the machine.

Although I have never experienced a virus, Norton routinely picks up Trojans and blocks them. Friends tell me that Norton is good...