Absoltely the worst thing to happen to me. But I have learned something. I have a friend who stopped by and she e-mailed me the same thing. I have everything going now. I am going to paste another method I found also for win98. The McAfee I saw was for win95. Many Thanks to the person who wrote this. I can't tell you what a relief it was to find this.
STEP #1
------------------------------------------------------------------------------
--
Start/Run/ type in regedit
Don't do anything unless i tell you to.
At the top of that regedit window, hit Edit/Find.. type in msdos98.exe, hit
your enter key.
When found, the msdos98.exe will be highlighted, just hit your delete key on
your keyboard. Disregard any caution screen.
Hit F3 (to continue find). If any other instances of msdos98.exe are found,
delete them also.
If nothing was found, go back to the top of the regedit screen, click the My
Computer icon on the left, click Edit/Find, and do Finds for MINE.exe,
mueexe.exe, delete any if found.
Close the registry.
STEP #2
------------------------------------------------------------------------------
--
We're going to edit your SYSTEM.INI and WIN.INI (configuration) files first.
These files tell windows what to load and it's NORMALLY how your pesky little
trojan is running.
If you find nothing listed in either of these files, please proceed to the
next step
(For those having problems locating win.ini file, try this: Start/Run, type
in sysedit. Several screens pop up. Select the one labeled Win.ini)
Go to start/find/files, type in WIN.INI, LookIn: C: and be sure that
subfolder box there at the bottom is marked. Then hit Find Now. When that
WIN.INI file pops up, I want you to use your mouse and right click on it,
select properties.
At the bottom of that next screen, UNmark all attributes, then hit Apply, hit
ok. Double click the WIN.INI file and it will open in notepad.
At the top of that notepad window, click Edit/Word Wrap.
Towards the top of that WIN.INI file, you'll see ...
run=
uninstallms.exe (or mueexe.exe, or msdos98.exe)
---you wouldn't see this if you weren't in Word Wrap
I want you to delete that c:\windows\uninstallms.exe (or muuexe.exe, or
msdos98.exe).
At the top of that Notepad-Win.ini, hit File/Save.
Close that window.
Back to the Find window, type in SYSTEM.INI, LookIn: C: and be sure that
subfolder box there at the bottom is marked. Then hit Find Now. When that
SYSTEM.INI file pops up, I want you to use your mouse and right click on it,
select properties.
At the bottom of that next screen, UNmark all attributes, then hit Apply, hit
ok. Double click the SYSTEM.INI file and it will open in notepad.
At the top of that notepad window, click Edit/Word Wrap.
Approximately 5 lines down you should see
Shell=Explorer.exe---don't touch that part.
If any of these appear there or immediately below, delete them...
MSDOS98.EXE, mine.exe, mueexe.exe or uninstallms.exe
---DO NOT DELETE ANYTHING ELSE or your system may not run!
At the top of that Notepad-System.ini, hit File/Save.
Close that window.
STEP #3
------------------------------------------------------------------------------
--
In the Find window, type in mine.exe, When that file pops up, right click on
it, select properties, and again, UNmark all attributes there at the bottom.
Click Apply, then click OK.
Now, do a Find for uninstallms.exe. Right click on it, select properties,
UNmark all attributes, then hit Apply, hit OK.
Do another Find for msdos98.exe, repeat the above instructions.
Do another Find for mueexe.exe , repeat the above instructions.
(don't fret if you don't find this file)
Now, you MUST locate the file that was originally download, It probably came
from an infected friend in an email marked HEY YOU.. the attachment could of
been MINE.ZIP, Mi62.zip, Mi87.zip, Mi99.zip etc.. So, in that find area look
for mi*.*and get rid of that sucker!!
Close that Find window.
STEP #4
------------------------------------------------------------------------------
--
Start/Programs/MSDOS...when you see that black screen, type EXACTLY
(there's a space after del)
del C:\msdos98.exe ------- hit enter
del C:\windows\uninst~1.exe ------ hit enter
del C:\windows\system\mine.exe ------ hit enter
del C:\windows\system\mueexe.exe ------ (If this was found earlier) hit enter
--nothing will appear to happen, that's just fine.
Type exit to close that msdos window.
Shut down your computer, count to 30 and restart
Crossing our fingers, everything should be back to normal now.
Start/run, type in win.ini.. if those lines are still gone, CONGRATS!! You
did it!!
Be sure everyone on your aol account changes their passwords--Keyword
PASSWORD!
***VERY IMPORTANT*** This trojan duplicated itself into email and sent the
MINE trojan/virii to everyone on your aol buddylist and possibly in your
address book. You MUST notify your friends and have them use these
instructions to remove it. Don't leave your friends out in the cold !!!!
Whoa.. we're all done.. you can relax now