Author Topic: Yahoo Virus Removal Procedure  (Read 1696 times)

0 Members and 1 Guest are viewing this topic.

Offline زینوک Zenok

  • Semi Seniour Baask
  • ***
  • Posts: 164
  • Karma: 10
Yahoo Virus Removal Procedure
« on: November 01, 2006, 10:31:48 AM »
This brand new virus is now everywhere. It is spreading so fast as it targets users of Yahoo Instant Messenger. Users can protect themselves by not clicking on links sent to them by other users or contained in Yahoo! Messenger status messages of those contacts on their contact list.

If your computer is infected with this powerful Trojan /virus, it sends the nsl-school.org url to all of your friend list in yahoo messenger using your ID and expect that in only a few hours many of your friends will get infected with it.

So how to remove this manually from your computer ?

1: Close the IE browser. Log out messenger / Remove Internet Cable.

2: To enable Regedit

Click Start, Run and type this command exactly as given below: (better - Copy and paste)

REG add HKCU\Software\ Microsoft\ Windows\CurrentV ersion\Policies\ System /v DisableRegistryTool s /t REG_DWORD /d 0 /f

3: To enable task manager : (To kill the process we need to enable task manager)

Click Start, Run and type this command exactly as given below: (better - Copy and paste)

REG add HKCU\Software\ Microsoft\ Windows\CurrentV ersion\Policies\ System /v DisableTaskMgr /t REG_DWORD /d 0 /f

4: Now we need to change the default page of IE though regedit.

Start>Run>Regedit

From the below locations in Regedit chage your default home page to google.com or other.

HKEY_CURRENT_ USER\SOFTWARE\ Microsoft\ Internet Explorer\Main

HKEY_ LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Internet Explorer\Main

HKEY_USERS\Default\ Software\ Microsoft\ Internet Explorer\Main

Just replace the attacker site with google.com or set it to blank page.

5: Now we need to kill the process from back end. Press Ctrl + Alt + Del

Kill the process svhost32.exe . ( may be more than one process is running.. check properly)

6: Delete svhost32.exe , svhost.exe files from Windows/ & temp/ directories. Or just search for svhost in your comp.. delete those files.

7: Go to regedit search for svhost and delete all the results you get.

Start menu > Run > Regedit >

8: Restart the computer. That's it now you are virus free.
Image Hosted by ImageShack.us

Offline baloch_friend

  • Semi Seniour Baask
  • ***
  • Posts: 91
  • Karma: 3
Re: Yahoo Virus Removal Procedure
« Reply #1 on: November 01, 2006, 10:38:24 AM »
Oh zenok adda to wa mana tursent .
To bazen soje datag bale mani hech sar per na bhoot .
:(

Offline زینوک Zenok

  • Semi Seniour Baask
  • ***
  • Posts: 164
  • Karma: 10
Re: Yahoo Virus Removal Procedure
« Reply #2 on: November 01, 2006, 10:47:39 AM »
Oh zenok adda to wa mana tursent .
To bazen soje datag bale mani hech sar per na bhoot .
:(

Tou bas yak chizay bekan.. aga tara messenger friends 'nsl-school.org ' ae linka rah diyant. gura tou aahiya click makan... umaeden nou tai sar per biit.. :)
Image Hosted by ImageShack.us