Help me!!!?

Question

Something remove my computer's calculator,cursors and run (the that can u see in the start button).Even Anti-virus can't detect some viruses.How can I bring back my lost profile (due to viruses) ?What kind of file is similar to run?What is the effective way to get rid of this?
>
>
>My yahoo!messenger has problems because my music,buzz,weather,etc. (the thing below the friends lists) is replaced by nsl-school.org(don,t go to this site).How can I get rid of this???

My run command (the one in the start button) is gone and now I can't get rid of nsl-school.org.Where can I restore my run command???Is there anyway that I could get rid of nsl-school.org without using run command???Any ideas???

My run command is missing and now I can't can't get rid of nsl-school.org.How can I get rid of this virus without using run command???Is there anyway to restore run command???Any Ideas???

Answer 1

The first thing I would suggest is to boot the computer into safe mode (after dowloading tools - I am sure you will find you have more than this one virus). Also, I am assuming that you have some adware management tools as well an anti virus program installed. That "nsl" thing IS avirus and is speading like wildfire right now.

To remove this specific virus there is a tool for download here: http://krazyfukr.awardspace.com

If you end up having to boot into safe mode to run tools, if you can, turn OFF system restore. That is found going to the control panel > system > system restore tab. Also, if by any chance you know what programs you might have trouble with (like that weather program and anything else that was "free" or associed to Gator, etc... go to the control panel add remove programs a dn DUMP all of the programs you don't need. If you can't do in now wait until you are in safe mode and do it then (next). If you can run the hard drive cleanup tool, clear IE cache, cookies... do that also.

To boot into safe mode, first, shut down your computer and when it starts the reboot process start punching the F8 key every couple of seconds until you get the menu that lets you select "safe mode".

Once you are in safe mode (the computer will probably look funny) scan your computer with installed tools for spyware and viruses. Remove programs if applicable as mentioned above. If you don't have these tools go to download.com and get them. Spybot is a good free adware tool and AVG is a good anti virus.

PS: System restore saves your problems too which is why it needs to be turned off. Once you have things clean and functioning well again turn it back on and create a new restore point.

Answer 2

Uninstall yahoo messenger and use these scans below, then reinstall mess.

All of these are ones that I personally use and all are free.

AVG Removes I-Worm/Stration · BackDoor.Generic3.GBB and .GBC · Worm/Generic.FX · Exploit.WMF
http://free.grisoft.com/doc/5390/lng/us/tpl/v5

Spybot - Search & Destroy detects and removes spyware, a relatively new kind of threat not yet covered by common anti-virus applications. Spyware silently tracks your surfing behaviour to create a marketing profile for you that is transmitted without your knowledge to the compilers and sold to advertising companies. If you see new toolbars in your Internet Explorer that you haven't intentionally installed, if your browser crashes inexplicably, or if your home page has been "hijacked" (or changed without your knowledge), your computer is most probably infected with spyware. Even if you don't see the symptoms, your computer may be infected, because more and more spyware is emerging. Spybot-S&D is free, so there's no harm giving it a try to see if something has invaded your computer.
http://www.safer-networking.org/

http://superantispyware.com/
SUPERAntiSpyware is the most thorough scanner on the market. Our Multi-Dimensional Scanning and Process Interrogation Technology will detect spyware that other products miss! SUPERAntiSpyware will remove ALL the Spyware, NOT just the easy ones!
Easily remove over 100,000 pests such as SmitFraud, Vundo, WinFixer, SpyAxe, SpyFalcon, WinAntiVirus, AntiVermins and thousands more!
Make sure after you download any of these, that you update them.

Manually remove messenger virus.
Start Menu >> Run

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f

copy & paste in run & press enter

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

copy & paste in run & press enter

& delete the files svhost32.exe from ur comp & temp folder after killing the process


Be sure to come back to Yahoo Q&A and vote for one of the answers as best answer!

Answer 3

just do system restore