Someone gave me a computer worm a link to http://ns1.hosting101.biz/~metalurg/images/template/index.php that automatically makes itself my homepage in Internet explorer..
Also my run command dissapeared from my start menu...
Yahoo messenger keeps automatically trying to email the virus link to my friends....
I've tried AVG, Spybot and Lavasoft, all found the virus but none do anything to fix it. deleting it or moving it to the "vault" doesn't work. Healing it doesn't work either!
I've done full scans also...
Help!
2007-05-06 15:08:05 · 13 answers · asked by fantapattaya 2 in Computers & Internet ➔ Security
Here is an overview and solution for this worm. It's called Worm_Sohanad.
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SOHANAD.AL&VSect=T
2007-05-06 15:22:17 · answer #1 · answered by Anonymous · 0⤊ 0⤋
you will keep getting it as long as you us internet explorer
If you do not have firefox get it now and use it instead of internet explorer so you dont get any more spyware http://securitynewsfromthenet.blogspot.com/
Run SUPERAntiSpyware Home Edition (free version)
http://securitynewsfromthenet.blogspot.com/2007/04/superantispyware-home-edition-free.html
If you still have question or problems let the experts take a look at whats happening on your computer.Visit the HijackThis Logs and Analysis forum.
http://www.bleepingcomputer.com/forums/index.php?showforum=22
2007-05-07 08:35:23 · answer #2 · answered by Dell techie 3 · 0⤊ 0⤋
go to the menu bar, select Tools>Internet Options>then type in your regular home(besides the worm)address. Then run a scan with any antivirus program that's best. If that doesn't work, I don't know anything else.
2007-05-06 22:16:50 · answer #3 · answered by Shining Plum 2 · 0⤊ 1⤋
Here are two free programs that will rid you of the worm.
A2Squared Malware out of Austria. Download their free version. This program removes, worms, rogue dialers, keyloggers, trace spyware and rouge cookies. http://www.emsisoft.com
Superantispyware the free version. This program is good at finding spyware missed by all others. http://www.superantispyware.com
Minddoctor, France
2007-05-06 22:14:03 · answer #4 · answered by MINDDOCTOR 7 · 0⤊ 1⤋
Here is one that worked for me. It's called STINGER and is FREE from McAbee the anti-virus company :
http://vil.nai.com/vil/stinger
It is an EXE file which means you have to download it but it is safe. I used it twice.
2007-05-06 22:44:57 · answer #5 · answered by Anonymous · 0⤊ 0⤋
worms can be a problem! Grrrr! Raaar!
you can try downloading adaware se and running a full system scan, it will find it! Grrrr, Raar!
2007-05-06 22:15:42 · answer #6 · answered by Fly Low 3 · 0⤊ 1⤋
it does not sound like a worm.It sounds like a malicious program has been installed.Go to add and remove programs and uninstall any programs that was installed on the day the problem started...good luck
2007-05-06 22:20:02 · answer #7 · answered by Anonymous · 0⤊ 1⤋
here is a free tool from symantec you can use to repair the disabled run command, read how to use the tool, on this link
http://www.symantec.com/security_response/writeup.jsp?docid=2004-050614-0532-99
download it from this link
http://securityresponse.symantec.com/avcenter/UnHookExec.inf
2007-05-06 22:15:07 · answer #8 · answered by Anonymous · 0⤊ 0⤋
Try Stinger from McAfee. This does not install and should possibly solve your problem.
2007-05-06 22:18:37 · answer #9 · answered by arjun_tva 2 · 0⤊ 1⤋
Download a copy of Avast Home from www.avast.com, install it, set it to scan when next restart PC, it should help to contain this nasty trojan
2007-05-06 22:12:30 · answer #10 · answered by Cupcake 7 · 0⤊ 2⤋