Discussion Locked

Virus recovery (Netscape problem)

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I recently encountered the W32.magistr.24876@mm virus and am having a problem with getting back on my feet.

I first ran a virus removal program (Command Anti-Virus) and then Norton to learn which files had been corrupted. I then restored the corrupted files from tape backup. Where that didn't work, I reinstalled software. After all was said and done (and Norton was satisfied) my Netscape browser acted in an unstable manner. If would go to some sites, but when changing to another it would shut down. No obvious pattern.

I ordered a new Netscape Communicator (V. 4.77) disk -- received it today -- and installed it. Same problem. I reinstalled Windows 98(SE), and then tried again. Same problem. Reinstalled Communicator 4.77 (again). No change. Norton doesn't see any problems at this point. I might mention, however, that there have been repeated "fixes" made by Norton that involved invalid ACTIVX/COM extensions.

What's next?

O.J.

5 replies

by mcintosh

Hello,

On some systems, Magistr will release a payload that can destroy a computer's cmos/bios information as well as sectors of the hard drive. I would run a good diagnostic on the hard drive to see if this has happened.

You may want to reinstall everything again. Use FDISK /MBR, repartition the drive, format and reinstall everything. It's best to completely rebuild the boot sector and go from there when infected by viruses like this which have been activated on the system.

Matt

by zlitocook

By reinstalling do you mean that you fdisked and formated the drive? If you just put in the cd and reinstalled some of the virus infected files could still be there. Also if your back up had the virus befor it became active it could reinfect your system. The people who write those should be shot!

This discussion is closed to new replies.