W95.HybrisF - Removal

Risk Level 2: Low

Printer Friendly Page

Discovered: November 17, 2000

Updated: February 13, 2007 11:35:43 AM

Also Known As: W95.Hybris.Plugin, W32/Hybris@MM [McAfee], I-Worm.Hybris.dropper [Kaspers, WORM_HYBRIS.DR1 [Trend], Win32.Hybris.dr [Computer Asso

Type: Worm

Systems Affected: Windows 95, Windows 98, Windows Me

To remove this worm:

Run LiveUpdate to make sure that you have the most recent virus definitions.
Make sure that Norton AntiVirus is set to scan all files.
Restart the computer in Safe Mode (Windows 95/98/Me).
- Windows 95
  1. Exit all programs, and then shut down the computer.
  2. Turn off the computer, and then wait 30 seconds. You must turn off the computer to remove the virus from memory. Do not press the reset button.
  3. Turn on the computer. When you see the "Starting Windows 95" message, press F8.
  4. Type the number for Safe Mode, and then press Enter.
- Windows 98/Me
  1. Click Start, and click Run.
  2. Type msconfig and then click OK. The System Configuration Utility dialog box appears.
  3. Click the General tab, and click Advanced.
  4. Check Enable Startup Menu, click OK, and then click OK again.
  5. Exit all programs, and then shut down the computer.
  6. Turn off the computer, and then wait 30 seconds. You must turn off the computer to remove the virus from memory. Do not press the reset button.
  7. Turn on the computer, and wait for the menu.
  8. Type the number for Safe Mode, and then press Enter.
    
    NOTE: When you have completed all of the steps in this document, then you may repeat steps 1 through 4. In step 4, uncheck Enable Startup Menu. The next time you restart the computer, you will not see the startup menu.
Run a full system scan.
- If Norton AntiVirus detects W95.HybrisF, reboot into Normal Mode and download and run the W95.HybrisF fix tool. This tool will repair any Windows executable files that have been infected by W95.HybrisF.
- If Norton AntiVirus detects an infection other than W95.HybrisF, choose to repair any infected files. If Norton AntiVirus cannot repair the files, choose to delete them.
When the scan has finished, restart the computer into Normal Mode.

Writeup By: SARC Engineer

Technical Details

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}