Alert: Yahoo messenger Virus is out there, Beware!

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Hi,

Today I was one of the poor fellows who got infected by W32.Imaut.A
worm. I recieved a link from one of my friend in Yahoo messenger and
innocently i clicked the link. Thats it, my IE got affected and
Registry editor was disabled! And the virus sent the link to all my
friends list before my eyes! I couldnt even stop it. Iam slowly
recovering from the virus, hope the following link helps you if you get
infected by the same virus and it was helpful for me,

http://www.symantec.com/security_response/writeup.jsp?docid=2006-100316-3321-99&tabid=3

Fortunately this virus doesnot do a fatal damage. But unfortunately if
you are in Yahoo messenger list of infected person,then you are bound
to recieve the virus link. Dont click that suspicious link, If you
click then you are dead! Beware!


Regards,
Sundar


Re: Alert: Yahoo messenger Virus is out there, Beware!

sundar22in@gmail.com wrote:
Quoted text here. Click to load it
http://www.symantec.com/security_response/writeup.jsp?docid=2006-100316-3321-99&tabid=3
Quoted text here. Click to load it

It is a worm and not a virus, it isn't dangerous, but very annoying.
This is a worm that spreads itself by sending links to your contacts in
messengers like Yahoo, AOL and Windows Live messengers. It disables
Registry Editor and Task Manager. It changes the Internet Explorer (IE)
home page and also modifies registry such that you cannot change the
homepage address.

Here are simple steps following which you can get the worm removed from
your system:

1) Download this file:
http://avsharath.googlepages.com/RepairRegistry.reg (repairs your
registry which is damaged by the worm)

2) Double click on that downloaded registry file, you will be asked
wheather you're sure to add this to registry, click yes.
3) Restart your system.
4) Delete the file svhost32.exe from your Windows folder( If it is
present).
5) Delete the file svhost.exe from your Windows folder( If it is
present).
6) Lastly, search for: ENET.EXE and delete it if found.

And the silly worm's story ends.

This solution is also put up in my website:
http://www.geocities.com/avsharath/Removing_W32_Sohana.B_Worm.htm


Regards,
Sharath A.V


Site Timeline