What is MTX? MTX is an email worm affecting Windows 32-bit operating systems. MTX blocks access to certain antivirus vendor sites and it irreparably damages WSOCK32.DLL. For a list of the attachment names MTX travels with, check out the full description.

How do I prevent MTX? Never open attachments received unexpectedly, even if received from someone you know. Email worms such as MTX are generated from an infected users address book, thus you will very likely know the sender. MTX arrives with no subject line and no message text. The filenames of the infected attachment are provocative. Any attachments received in such a manner should be regarded as very suspicious. If the attachment is to be opened, scan it first with updated antivirus software. You can also see if the attachment name is cross-referenced in the Infected Attachments Center.

How to Remove MTX: If you are already infected with MTX, follow the steps below to clean your system and prevent reinfection. Note that these steps involve editing the system registry. If you are not familiar or comfortable with the system registry, you may wish to ask assistance from a friend or co-worker who is.

1. Click Start | Run and type Regedit
2. Browse to the following registry key:
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
3. Highlight the Run key described above. In the right pane, search for the value:
   SystemBackup = c:\%windir%\mtx_.exe (where %WinDir% is the Windows directory)
   Delete this entire value (right click it and choose delete)
4. Browse to the following registry key:
   HKEY_LOCAL_MACHINE\SOFTWARE\(MATRIX)
   Delete the key (MATRIX) (right click it and choose delete)
5. Close the Registry
6. Next you will need to search for files used by MTX to load. Using Start | Find, search for "WININIT.INI" and WSOCK32.MTX - delete these files if found.
7. Reboot your system and scan "All Files" with updated antivirus software to clean any infected files. If you do not have antivirus software, visit the Prevention Center for online scanning options.
8. Files that cannot be disinfected, such as WSOCK32.DLL, will need to be restored from backup or via the operating system CD.