W32.Magistr.39921@mm

nasty_crash

Hey lads!

Im in s***! I have got this Trogan and worm - W32.Magistr.39921@mm

One of my Pc's has 3 infected files! Kernel32.exe and kdll.dll being two of them! now the problem is that those two files are used by windows and therefore do not allow you to delete them!

Has any1 got ne advise on how to get rid of them??

Cheers

yellum

Try symantecs site for a cleaner. Theres a fix out there for it alright.

MiCr0

info here:
http://www.sophos.com/virusinfo/analyses/w32mag.html

Red Moose

Is this the Quake 4 Demo that's on all the news sites?

flamegrill

probably the easiest way to do this is to make a windows 98 boot disk or boot from a windows 98 cd in dos mode with cdrom support and remove the 2 files in dos. I think these 2 files are not needed by ur system so you will not have to replace them with good versions.

any more questions post em here...

yellum

Magistr

http://www.centralcommand.com/ts/00D709001aet/antimagistr.exe

Magistr B

http://www.centralcommand.com/ts/00D709001aet/antimagistrb.exe

Loadsa tools here:

http://www.on.net/helpdesk/virusinfo.html

nasty_crash

cheers lads! its like im dissabled not being able to use my Pc properly!!!

Thanx

nasty_crash

How do you create a backup disk! on my new Pc it gives you the Create Backup Disc on the Start Menu but on my infected Pc it doesnt have one!

Any advise on how to make it?

Cheers

BattlingCheese

Try here http://www.bootdisk.com/

_CreeD_

Do NOT delete the Kernel.
Exract a clean copy and copy over the infected one if you have to.

flamegrill

Originally posted by _CreeD_
Do NOT delete the Kernel.
Exract a clean copy and copy over the infected one if you have to.

Creed kernel32.exe is not the win2k kernel and is safe to delete, i think you may have been mixing this up with kernel32.dll which is the win2k kernel.

Removal of the above files is nessary to rid your system of this worm.