W95.Spaces 99% gone. Get rid of the last? .VIx files?

[makoti]

Hello to all.
I had gotten the Opaserv worm & with it, the W95.Spaces.1445 virus. I got rid of the Opaserv (thank you for all the help with that, BTW) & managed to use rescue disks with Norton to get repair of all but 2 files from the W95.Spaces. The two files left infected are EBRR.VI9 (out of my epson monitor folder) and SYSTRAY.VI9. The .EXE files for both are clean.
My questions are:
What are these .VI9 files? There were .VIR & .VI0 thru 8 files from each that got repaired, but this .VI9 stayed infected. I've never heard of .VIx files. What do they do?
And can I delete them? I know that if I run them they will re-infect the computer. Can I delete them & be safe? Will the SYSTRAY.VI9 start with windows? And the Epson monitor is set to run at start-up, as well.
I thought about just running the whole thing again & seeing if the second time thru fixes them, but the first time took 10 hours.
At the moment, the computer remains off. I thought I'd play it safe for the moment, until I get some advice.
Thank you for any & all help you can give.

 

[KimberTech]

What operating system are you running makoti?

I would bet you are probably using McAfee...I pulled this from a page on the website:

http://de.mcafee.com/root/genericVIL.asp?genericURL=/VirusInfo/VIL/dispVirus.asp&virus_k=99753

Any files that were deleted will need to be restored.
Any files that were moved to the \INFECTED folder will need to be renamed and moved back to their original location.
*.*.vir files found in the \INFECTED folder may be infected with other viruses. If this is the case, attempting to rename such files will fail. Additional attempts to rename these files are not necessary.


Members of Tek-Tips provide answers to questions based on the information given. For the best answers, post detailed descriptions of the issue. Use the search features of the site to see if your issue was already addressed in another thread.

 

[makoti]

I am using Win98SE, with Norton 2002 Systemworks (sorry, should have included this the first time).
The *.VIR & *.VIx files are in the same folder as the original file is. I don't think anything is in the quaratine folder except old .exe files from the Opaserv cleaning (I can't really tell, because the Opaserv messed up the scripting in NSW & that page will not show up, and in the folder itself, the files all are re-named).
I have now updated my definitions for the Antivirus and run my scan 3 times, after shutting down & re-starting several times. Each time I am clean. It appears to have cleaned even the infected .VIx files now.
Is it safe to think that I can delete all these files? There are quite a few of them scattered around in different folders.
Thanks again for the help!

 

[KimberTech]

According to my research, you should be able to safely delete them.
You may need to copy certain files back to the disk if you do not have original clean ones in place for one or more of your programs, but perhaps not at all.

Check the registry and system files to be sure you have nothing loading that should not be, as a double check to the virus cleanings.

Sorry it took so long to answer you, not feeling well the last few days.

Let us know if you run into anything interesting or whether a delete has no effect. Valuable information for anyone else that runs into this.

Good Luck!

Members of Tek-Tips provide answers to questions based on the information given. For the best answers, post detailed descriptions of the issue. Use the search features of the site to see if your issue was already addressed in another thread.

 

[makoti]

Sorry to hear you were feeling poorly. Hope all is well.
I've been replacing files (mostly .exe files in my Windows/System folder) as needed with pretty good luck. I can get back on the 'net. I've had to re-install about 25% of my programs, but that is more of a pain than anything else.
As soon as I get up the nerve and back them up, I'll delete these files & see what happens.
If it goes badly, you all will be the first to know! ;-)
Thanks again.

 

[KimberTech]

Thanks, anytime.

Members of Tek-Tips provide answers to questions based on the information given. For the best answers, post detailed descriptions of the issue. Use the search features of the site to see if your issue was already addressed in another thread.