remove spam virus yahoo messenger

yahoo spamming

TRY THIS

This messenger worm which sends masses out to trick others to get it’s pretty old but not all comps can deal with it security wize
I adapted this solution for it

Steps for removal
Get an anti virus Like NOD32
Turn off yahoo messenger MOST IMPORTANT TO PREVENT SPREADING IT
Turn on Computer on safe mode [if ya don’t know how restart then pres F8 till the comp lets ya select this
DELETE ALL CONTENT OF C:\Documents and Settings\Administrator\Local Settings\Temp
Specially important to delete executables IEXPLORER.exe is the work not your real explorer
DELETE ALL CONTENT FROM C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
DELETE A.BAT from C:\
DELETE all executables from C:\WINDOWS\SYSTEM\ or com
RESTART!
To reactivate TASK manager you have to delete the following out of registries
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System DisableTaskMgr
AND
USER\Software\Microsoft\Windows\CurrentVersion\Policies\System DisableRegistryTools

Finish…

Hope your Windows get well back

or other version of virus

==========================================

The code for infecting virus is hidden in the html pages,and once you open it your pc will get infected.The virus is known as “nsl-school.org”it is because the url of the virus link ends with it.The virus can be avoided by ignoring all

* “nsl-school.org” links
* “myglobalnews.org”links
* “lottery-news.info” links
* “vnol.org”links
* “ie-protector.com”links

Watch out for these links when you login to your messenger,avoid clicking on them to be safe,because “PREVENTION IS BETTER THAN CURE”,you will be receiving these links from your friends,but it is the virus that actually sends it to you.The link comes in the following ways as IM’s

* Saying your friend has won a lottery
* “Damn she is so cute”along with link
* saying”Check this link for me”
* Asking to vote for a Vietnam beauty

REMOVING THE VIRUS
————————————–…

1. Close the IE browser. Log out messenger / Remove Internet Cable.
2. enable Regedit

Click Start, Run and type this command exactly as given below: (better – Copy and paste)

REG add HKCU\Software\Microsoft\Windows\CurrentV… /v DisableRegistryTools /t REG_DWORD /d 0 /f
3. To enable task manager : (To kill the process we need to enable task manager)

Click Start, Run and type this command exactly as given below: (better – Copy and paste)

REG add HKCU\Software\Microsoft\Windows\CurrentV… /v DisableTaskMgr /t REG_DWORD /d 0 /f
4. Now we need to change the default page of IE though regedit.

Start>Run>Regedit

From the below locations in Regedit chage your default home page to google.com or other.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Int… Explorer\Main

HKEY_ LOCAL_MACHINE\SOFTWARE\Microsoft\Interne… Explorer\Main

HKEY_USERS\Default\Software\Microsoft\In… Explorer\Main

Just replace the attacker site with google.com or set it to blank page
5. Now we need to kill the process from back end. Press Ctrl + Alt + Del

Kill the process svhost32.exe . ( may be more than one process is running.. check properly)
6. Delete svhost32.exe , svhost.exe files from Windows/ & temp/ directories. Or just search for svhost in your comp.. delete those files.
7. Go to regedit search for svhost and delete all the results you get.
Start menu > Run > Regedit >,
8. RESTART COMPUTER, NOW YOU ARE VIRUS FREE!!

The above tips worked for some people,Do it at your own risk.Be careful!!!
So watch out for the bug….
Source(s):
http://techno-geeks.blogspot.com/2006/11/virus-in-yahoo-messengerdont-panic.html

Be Sociable, Share!

•