W95.Hybris.worm virus

PiE

Apparently my WSOCK.DLL is infected with that yolk, and Norton AV says it can't clean it 'cos it's running...

So knowledgeable people, question is, how do I clean it?

Thanks in advance...

Mixie

make the antivirus bootdisks, and boot off them

flamegrill

mcafee have a simple fix for this.

what ya need to do is extract WSOCK.DLL from the cabs files on your windows 98 boot disk to c:\. then restart the computer in dos mode copy that file over the original.

problem solved.

yossarin

I got it before
an old rant on the topic:
http://www.boards.ie/vbulletin/showthread.php?s=&threadid=24035
which has some good links


SARC

edit: also make sure that you're not sending it to all your friends PiE - it might be actign as your sig file or just attaching itself to all your messages

best of luck

yoss

seamus

I wrote a huge email on this last year about how to kill it, hang on while I dig it up.....OK, run sfc(system file checker), and replace all files that it finds as wrecked, OK can't find the email....but before you do the sfc thing, go to your windows\system folder and arrange all files by their date modified. You'll probably find 2 files with random names; 1 will be some thing like tioutiou.exe and the other will be something else random but made on the same day. Delete them if they exist and then run the sfc thingy, and hey presto

PiE

Thanks a lot guys, sorted