w32.hybris

the old snow white, hahaha virus has infected some clients on our network. It killed the wsock32.dll file of course and extracting a fresh copy has not worked! i also tried extracting copies of winsock.dll and mstcp.dll. These are Win95 machines so I also tried rolling back and re-installing the winsock2 update. I still cannot get these machines to log-on to the domain. I have also removed all clients and protocols from networking and re-installed those. I removed and re-installed the NIC driver as well.
What now? i cannot log-on to the domain. When I re-load the NIC, TCP/IP is not shown in network properties, i have to add it. Does anyone know if this virus can propogate through a network?

 

http://www.symantec.com/avcenter/venc/data/w95.hybris.gen.html


this will tell you all about hybris.
i hope it helps,let us know in any case.
good luck.

 

been there done that, and allot more. thanks anyway. perhaps this is a networking forum question?

 

Try deleting the Winsock2 keys in the registry before reinstalling DUN and TCP/IP

Hybris is not known to affect this, but you may have other issues as well. It is however, network aware.

See step 13 here:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q241344

 

The regedit seemed to work. I ended up removing all networking components again, rolling back the winsock2 update and removing the reg entries then reloading everything and she's up. Thanks for the link, i didn't see that one when i was searching the ms knowledge base.

 

You're welcome, glad to hear you're back in business -- MS has a bunch of them, but that one was the most thorough