While the virus/worm may have been removed, corrupted or modified files
likely still exist; they don't contain a virus/worm but they have been
modified. Symantec indicates many files will need to be replaced with
originals. They don't specify which files or go into detail how to do it.
See
http://securityresponse.symantec.com/avcenter/venc/data/w32.magistr.24876@mm
.html and quoted "NOTE: This virus contains bugs which will corrupt some
files while attempting to infect them, as well as when the first payload
activates. These files cannot be repaired; they must be restored from
backup. (These files may be detected as W32.Magistr.corrupt)"
I would bet a windows re-install will fix it if the virus/worm is indeed
removed.
Fred Nielson
-----Original Message-----
From: PCSOFT - Personal Computer software discussion list
[mailto:[log in to unmask]]On Behalf Of Gary Burke
Sent: Tuesday, September 18, 2001 11:37 PM
To: [log in to unmask]
Subject: [PCSOFT] desktop icons
hi...a friend of mine has a computer with a strange problem...after a
reboot,his desktop icons act normally but within a few minutes they start
jumping or moving like crazy and it's almost impossible to click one as you
have to actually "chase" it...he did have the sircam vir** and by
downloading the "fixsircam" file from the Symantec site i was able to rid
his machine of the vir** but the icon problem was still present....i then
installed Norton 2002 on his puter and did a system scan...the scan showed
16 files that were infected with the Magistr ?? vir** and Norton was able to
repair all of these so that now his system is vir** free...but this didnt
solve the desktop icon problem...i then installed Tweakui and did the
"repair icons" feature but this also didn't solve the problem...so now i've
run out of ideas and was wondering if anyone else has ever had this problem
and may know a cause and\or solution to this problem....any help would be
appreciated....thanks......Gary Burke.
Do you want to signoff PCSOFT or just change to
Digest mode - visit our web site:
http://freepctech.com/pcsoft.shtml
Do you want to signoff PCSOFT or just change to
Digest mode - visit our web site:
http://freepctech.com/pcsoft.shtml
|
