Discussion Locked

win32@magistrate

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
how to clean this win32.@magistrat worm from my system

3 replies

by wanabedrsean

To remove this worm:

1. Run LiveUpdate to make sure that you have the most recent virus definitions.
2. Start Norton AntiVirus (NAV), and run a full system scan, making sure that NAV is set to scan all files.
3. If any files are detected as infected by W32.Magistr.24876@mm, choose Repair.
4. Modify the file Win.ini by removing any reference to an infected file from the run= line. In most cases, on a clean system, the run= line will not be loading anything.

To edit the registry:

CAUTION: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. Please see the document How to back up the Windows registry before proceeding. This document is available from the Symantec Fax-on-Demand system. In the U.S. and Canada, call (541) 984-2490, select option 2, and then request document 927002.
1. Click Start, and click Run. The Run dialog box appears.
2. Type regedit and then click OK. The Registry Editor opens.
3. Navigate to the key
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Run
4. In the right pane, delete the value which references a file infected by W32.Magistr.23876@mm.
NOTE: This virus contains bugs which will corrupt some files while attempting to infect them, as well as when the first payload activates. These files cannot be repaired; they must be restored from backup. (These files may be detected as W32.Magistr.corrupt) these are the norton instructions.
ftp://ftp.avx.com/tools/magistr/antimagistr.exe you are supposed to be able to download a removal tool from the obove url but I think it is a broken length

This discussion is closed to new replies.