vxd files wiped out by virus

[bdux]

I have several p.c's that are brand new . After 3 -4 weeks the windows *.VXD files are wiped and sometimes win.com is missing also the directroy for vxd files is wiped . What would be the cause of this ie what actual virus is doing this as my virus checking software doesn't detect a virus with the lastest definitions . The file structure is corrupted also .

 

[clivo]

Sounds like "CHODE".
Winsock.vbs is lauched when Windows starts on an infected computer. On the 19th of the month, this VBS script deletes files from the following directories:

C:\windows
C:\windows\system
C:\windows\command
C:\

To remove "CHODE":
Delete C:\Program Files\Chode or C:\Program Files\Foreskin directory
Delete C:\Windows\Start menu\Programs\Startup\Ashield.pif
Delete C:\Windows\Start menu\Programs\Startup\Netstat.pif
Delete C:\Windows\Start menu\Programs\Startup\Winsock.vbs
However, if your problem is caused by a virus, there hould be some kind of notification by the virus; ego is hard to beat.

 

[bdux]

Thanks for the advice Clive . I have checked for the files mentioned and not found them but I just ghosted a backup image back to the P.C and suspect the virus may lurk on a users floppy disk which the virus checker fails to pick up and then sits on the P.C and strikes . Do it only affect win98 as the other p.c's with win95 don't seem to be affected just the win98 machines

 

[fenris]

If it is a vbs virus, then it will infect any system that has vb scripting enabled. I believe that win98 has it enabled by default. I think NT does as well, but I am not sure...

 

[RachelD]

Win98 does have scripting installed by default. I always turn it off in my network - the average user doesn't even know what scripting means. To turn it off go into Control Panel | Add/Remove Programs | Windows Setup | Accessories. uncheck the box next to Windows Scripting Host.