|
Posted by Sharath A.V on October 15, 2006, 10:36 pm
If you were Registered and logged in, you could reply and use other advanced thread options
sundar22in@gmail.com wrote:
> Hi,
>
> Today I was one of the poor fellows who got infected by W32.Imaut.A
> worm. I recieved a link from one of my friend in Yahoo messenger and
> innocently i clicked the link. Thats it, my IE got affected and
> Registry editor was disabled! And the virus sent the link to all my
> friends list before my eyes! I couldnt even stop it. Iam slowly
> recovering from the virus, hope the following link helps you if you get
> infected by the same virus and it was helpful for me,
>
>
http://www.symantec.com/security_response/writeup.jsp?docid=2006-100316-3321-99&tabid=3
>
> Fortunately this virus doesnot do a fatal damage. But unfortunately if
> you are in Yahoo messenger list of infected person,then you are bound
> to recieve the virus link. Dont click that suspicious link, If you
> click then you are dead! Beware!
>
It is a worm and not a virus, it isn't dangerous, but very annoying.
This is a worm that spreads itself by sending links to your contacts in
messengers like Yahoo, AOL and Windows Live messengers. It disables
Registry Editor and Task Manager. It changes the Internet Explorer (IE)
home page and also modifies registry such that you cannot change the
homepage address.
Here are simple steps following which you can get the worm removed from
your system:
1) Download this file:
http://avsharath.googlepages.com/RepairRegistry.reg (repairs your
registry which is damaged by the worm)
2) Double click on that downloaded registry file, you will be asked
wheather you're sure to add this to registry, click yes.
3) Restart your system.
4) Delete the file svhost32.exe from your Windows folder( If it is
present).
5) Delete the file svhost.exe from your Windows folder( If it is
present).
6) Lastly, search for: ENET.EXE and delete it if found.
And the silly worm's story ends.
This solution is also put up in my website:
http://www.geocities.com/avsharath/Removing_W32_Sohana.B_Worm.htm
Regards,
Sharath A.V
| 
XML site map