7 replies
by pisces_ldh
This is due o w32.magistr virus. U can remove the virus using norton antivirus 2001 or 2002 with laest virus definations. Also u have to delete following entries from regitsry
Navigate to the key
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Run
In the right pane, delete the value that refers to a file that was detected as infected by W32.Magistr.24876@mm.
also u have o edit win.ini
In the [windows] section of the file, look for the line that begins with
run=
To the right of the equal (=) sign, look for text that refers to a file that was detected as infected by W32.Magistr.24876@mm.
Delete this text.
by deane
by abyprajan
Your system is infected with W32.Magistr.39921@mm virus. Use Norton Antivirus 4.0/2000/2001 with option "Scan all files".
1. During the scan with NAV, note the name of any files infected by W32.Magistr.Trojan.
2. Click Start, and click Run.
3. Type the following, and then click OK.
edit c:\windows\system.ini
The MS-DOS Editor opens.
NOTE: If Windows is installed in a different location, make the appropriate path substitution.
4. In the [boot] section of the file, look for the following entry
shell=Explorer.exe
5. Position the cursor immediately to the right of Explorer.exe.
6. Press Shift+End to select all of the text to the right of Explorer.exe and then press Delete.
7. Click File, and Exit.
8. Click Yes when you are prompted whether to save the changes.
After that edit the Registry to remove virus entries - (make sure you take of backup of registry)
1. Click Start, and click Run. The Run dialog box appears.
2. Type regedit and then click OK. The Registry Editor opens.
3. Navigate to the following key:
HKEY_Local_Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4. In the right pane, look for a value that has a random file name with the .exe extension, and that points to the \WinNT\System or \Windows\System folder. This may be the name of a file that was detected as W32.Magistr.39921@mm when you ran the full system scan.
5. Delete any such values that you find.
6. Do one of the following:
If you are running Windows 95/98/Me, click Registry, and then click Exit.
If you are running Windows NT/2000/XP, go on the step 7.
7. Navigate to the following key:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon
8. In the right pane, double-click the following value: Shell
9. It will show a value Explorer.exe.
10. If there is any value other than Explorer.exe, delete that additional prameter
11. Click ok and exit
by deane
by abyprajan
Your system is infected with W32.Magistr.39921@mm virus. Use Norton Antivirus 4.0/2000/2001 with option "Scan all files".
1. During the scan with NAV, note the name of any files infected by W32.Magistr.Trojan.
2. Click Start, and click Run.
3. Type the following, and then click OK.
edit c:\windows\system.ini
The MS-DOS Editor opens.
NOTE: If Windows is installed in a different location, make the appropriate path substitution.
4. In the [boot] section of the file, look for the following entry
shell=Explorer.exe
5. Position the cursor immediately to the right of Explorer.exe.
6. Press Shift+End to select all of the text to the right of Explorer.exe and then press Delete.
7. Click File, and Exit.
8. Click Yes when you are prompted whether to save the changes.
After that edit the Registry to remove virus entries - (make sure you take of backup of registry)
1. Click Start, and click Run. The Run dialog box appears.
2. Type regedit and then click OK. The Registry Editor opens.
3. Navigate to the following key:
HKEY_Local_Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
4. In the right pane, look for a value that has a random file name with the .exe extension, and that points to the \WinNT\System or \Windows\System folder. This may be the name of a file that was detected as W32.Magistr.39921@mm when you ran the full system scan.
5. Delete any such values that you find.
6. Do one of the following:
If you are running Windows 95/98/Me, click Registry, and then click Exit.
If you are running Windows NT/2000/XP, go on the step 7.
7. Navigate to the following key:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon
8. In the right pane, double-click the following value: Shell
9. It will show a value Explorer.exe.
10. If there is any value other than Explorer.exe, delete that additional prameter
11. Click ok and exit
by deane
by deane
This discussion is closed to new replies.
Trending Windows Forum posts
Sort by Trending