Desktop

Ask something
Discussion Locked

Hybris worm

0 helpful
10 replies

by akstephr

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
My father-in-law recieved the Hybris.gen.worm virus. His PC was running ME, now you can only get to DOS prompt. When you try to change the drive from A to either C or D, it will change for a second, then flip back to A. When there is a floppy in the drive, you can dir it and see it has data, but you cannot get a boot disk to execute. We have managed to get it into safe mode, but as soon as the desk top opens, you get an error message that explorer.exe failed to load, restart computer. Restarting brings up the same message. We tried reformatting the hard drive, but it will not recognize the CD drive - it keeps saying to put in the CD, even though it is in there (and yes the cd has been cleaned). Does anyone have any ideas/suggestions/help?

10 replies

by akstephr

Added note, he is now telling me that the operating system cannot be located on any device.

by akstephr

I have a boot disk...... it will not execute. Norton's "solution" also did not work.
P.S. your URL didn't work either.

by wpmercer

I have looked this up for you. The best way to combat a virus is to have a plan. I too went ahead and reformatted after my first virus but I didn't want to reload anything the second time. It is a little too late since you reformatted the HD.W95.Hybris.worm is a dropper file that the W95.Hybris.gen worm copies to a hard disk when an infected email attachment is opened. It can also be detected in the original attachment that is received from an infected computer.
NOTE: Virus definitions dated prior to February 22, 2001, may detect this as W95.Hybris.gen.dr.

1. Run LiveUpdate to make sure that you have the most recent virus definitions.
2. Start Norton AntiVirus (NAV), and run a full system scan, making sure that NAV is set toscan all files.
3. Delete any files detected as W95.Hybris.worm.
4. Follow the instructions in the document below to make sure that the worm has been removed.

http://service4.symantec.com/SARC/sarc.nsf/html/W95.Hybris.gen.html

Now you needan emergency disk that has the CD ROM driver to reload your OS.

by akstephr

I would LOVE to connect to liveupdate, but the problem is --- I can't get an operating system on this hard drive!!!
P.S. your URL doesn't work either.

by ojmj

The answers (above) are correct. Follow them and you will be back up and running.

You will need to build another boot disk from a known clean computer. After you have built it, be sure to open the "write protect" tab on the disk. Your boot disk was probably infected when you put it into your drive.

The URLs above will work. The problem with them is that spaces were added when they were put on this forum. (This happens all the time.) Remove the spaces and go to the solution pages.Good luck with this!

O.J.

by dmiles

What type of anti-virus software are you using to clean the sytem?
Try creatin a new anti-virus ERD boot disk,use the file protection to lock the disk,insert in A:drive and boot computer,apperently the MBR record is still infected,
Also you will need a new floppy startup disk created from another similar machine with the same operating system and apply the file lock procedure to disk.
Using another computer download the anti-virus instructions from www.symantec.com and follow the instructions.

This discussion is closed to new replies.