Magistr virus help

[jessilaree]

I recently ran Norton Antivirus on my computer and it found the virus [email protected] It failed to repair, quarantine, and delete each file contaminated. The files that were infected were 3dtext.scr, cliconfg.exe, emstp.exe, dllhost.exe, dplaysvr.exe, fixmapi.exe, ie4uinit.exe, mstinit.exe, regsvr32.exe.
How do I repair these files and get rid of the virus? I don't to delete them because they might be important. What do I need to do next?


Jessica

 

[SavvyLady]

http://forums.techguy.org/showthread.php?s=&threadid=63125&highlight=Magistr+virus
see this

and http://www.ukans.edu/acs/virus/viruses/magistr.shtml

and http://www.symantec.com/avcenter/venc/data/[email protected]

you should run your UPDATED VIRUS PROTECTION EVERY NIGHT

 

[Rollin' Rog]

Not all of those files really need to be replaced. A few are quite obscure or not Windows files. You can check to see which are Windows related by using the site below:

http://support.microsoft.com/servicedesks/fileversion/dllinfo.asp?fr=0&sd=msdn

How you replace them will depend on your Windows version. This symantec article covers most of them:

http://service4.symantec.com/SUPPORT/nav.nsf/docid/1998081714501206

The one file I see there that is most important to replace is regsrv32.exe. It is used during installs to register dlls in the Windows registry so they can be properly executed.

Using SFC to extract files (Win98 only)

1. Go to Start>Run and enter SFC and click OK
2. Check "Extract one File"
3. Enter the file name and click on "Start"
4. In the "Restore from" field enter:: D:\WIN98 [if 'D' is not the letter of your CD-Rom drive, modify appropriately]
5. Click OK

{if you do not have a Windows system CD, try subsitituting c:\windows\options\cabs in the"restore from field"}

For WinME, see...

http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q265371