win32/mtx.attachment worm

[scooby]

After applying a utility provided by the antivirus vendor all but one file was cleaned and all registry entries apparently removed. Explorer.exe was still infected and unable to be cured. I deleted and copied the file from a clean computer. After copying it over it says that unable to load explorer.exe you must reinstall windows?

Any suggestions

[reboot]

Reinstall windows. :D
Just rename win.com to win.bak in the c:\windows folder, then run the install WITHOUT restarting the computer.
It will install windows right over top, keeping ALL your settings in place, but repairing the Explorer associations, with the right filename and date.

[scooby]

after it said that the PC turned off as obvioulsy it was unable to load windows....what i'm doing now is booting with a clean 98 boot disk and renaming the file. I'll have to place a 98 startup disk to have access to the CDROM drive and then install. That would still preserve settings?

[HAL9000]

Don't forget that it's going to want to install to the C:\WINDOWS.000 directory and if you do that, it will be a clean install. To keep everything, make sure to rename the target directory back to C:\WINDOWS.

[scooby]

thanks a million

[scooby]

hal...one more question :) After re-installing, during the boot process it hangs at scanning boot sector [C]

[scooby]

sorry, meant scanning boot on Drive [C]

[reboot]

Boot to a known good non-virus floppy boot disk.
At the a: prompt, type: fdisk /mbr
Try it again.

[scooby]

ok, i disabled the AV once i was able to enter in safe mode and that worked. I reinstalled networking components that got wacked and reinstalled AV. PC now operational. Still new to most of this so i apologize for what sometimes may be silly questions. Thanks again for the help!

[Chris in U.K.]

Fascinating stuff here....Jim I think you should copy the thread to System Security.

Chris.