How Do I Get Rid of "YAY"?

Question

When I boot up my computer I get about 15 cascading little squares that says "yay" and an "ok" box to make them go away. Does anyone know what this is from and how to get rid of it??

Answer 1

It is not a virus - it is a Trojan horse. A relatively new one, too, which explains why some anti-virus products might not have added detection of it yet. See the link below for F-Secure's description of this thing. Their scanner detects it - maybe it can remove it too.

Answer 2

I keep informed of computer security and malware issues and this so-called "Yay-Virus" seems to be very new and spreading very rapidly in the past couple days.

There is always a delay between the time that a new malware is introduced and the time that the anti-virus and anti-spyware vendors find a cure and download it to there customers.

This delay can range from anywhere from a few hours to a week or more.

At this point it seems all you can do is keep your security apps updated and wait for the "fix". It will come in time.

Answer 3

You might want to check your startup options or your prefetch folder. You might even find something in your registry. If you have Windows XP, ME, 2000 you should go to the start menu, click on run and type MSCONFIG. To check your prefetch, follow the same command above but type in PREFETCH in the box. To check your registry, same command but type REGEDIT in the box instead. After finding it, you can speed up the boot up of your computer and make sure you have quick boot turned on in your bios.

Try bootvis, a Microsoft program that will allow you to tweak some settings for a faster bootup.

Also, Start > Run > msconfig, click the bootini tab and check "/NOGUIBOOT" (will get rid of the MS spash screen loader)

then click the Services tab, check the box that says "Hide all Microsoft services" and see what else is slowing you down.

But to answer your question fully, what is your OS, what have u installed recently? ETC...

Answer 4

lol must be a virus (this doesnt seem like a virus i just said that to joke around... people here most likley have ZERO clue about what an actual virus is and does, this just sounds like someone was messing with your computer)...

Okay go to start -> all programs -> startup and look to see if there are any programs there that have anything to do with "YAY", (to run them just click them), or you can go to start -> run -> type "msconfig" and go to the last tab 'startup' and just look there for any files that might cause those pop ups

other than that i dont know what to tell you besides run a anti virus software program and a spyware/adware remover program

Answer 5

You have a new virus that is spreading across the internet. At present, there is no known fix for this problem, but you can sign up to receive notification when a fix becomes available here:

http://www.bestspywarereport.com/remove-yay.html

Right now, all of the anti-virus and anti-spyware vendors are scrambling to figure out what this is and how to repair it. Until a fix is released, you are pretty much going to have to live with it.

Good luck!

Answer 6

Hi,
I also had the same issue last week. This is what I found on a blog when I researched it last week:
=========================
W32/Agobot-M Worm
This section helps you to understand how it behaves
W32/Agobot-M is a member of the Agobot family of windows worms with a backdoor component.
In order to run automatically when Windows starts up the worm copies itself to the file asass.exe in the Windows system folder and adds the following registry entries pointing to this file:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\yay.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\yay.exe.
W32/Agobot-M allows a malicious user remote access to a compromised computer.
=============
This is what I did to eradicate:
1) called our tech support guys. They downloaded Trend Micro antivirus software and Microsoft defender. They spent approx. 5 hours scanning my harddrive. The next morning when I booted up I had the same issue.
2) I downloaded the free SPYBOT program and ran it. It found 6 pages of junk still on my harddrive.

I rebooted and I no longer see the YAY pop-ups.

Hope this helps.

Answer 7

Go download a virus scanner, probably a Trojan virus or similar.

Search AVG Anti-Virus, Download the Free Version, run it, then Disable the Windows Messenger add on. My brains struggling to remember how though.

*tinkering laugh*

Answer 8

I've got the same problem and my anti-virus and anti-spyware was unable to locate any problems running full scans...we'll have to wait and hope for a fix to come out soon...

Answer 9

'Tis a virus.

Get a decent scanner (like McAfee) and have it run through your machine. It should find the culprit.

Answer 10

VIRUS!

It's most likely a non-threatening virus, but you will have to go into your hard drive and delete the program.