How do i get rid of the virus in yahoo messenger?

it always prompt me when i using yahoo messenger.The way it prompt me is like pop up on the screen and the status there is change.To let u know,my friend had gave me a offline message and a link website.Then i clicked on the link which the website contain virus.This is come even bad when i've clicked on it,the message started to keep sending and prompting everyone in my yahoo messenger's list.I've used my antivirus to clean the virus on my PC and i've succeed to do so.But sadly,the virus is happen to prompt and keep bothering me when i use yahoo messenger only.This thing is not happen to my msn messenger or else and my computer is still free from any virus.Please help me to solve the problem.Thank you.

How do i get rid of the virus in yahoo messenger?
Removing the Yahoo / AOL / MSN Messenger Virus





Virus Name: W32 Sohanad.B or W32 Sohanad.C





This is a worm that spreads itself by sending links to your contacts in Yahoo, AOL and Windows Live messengers. It disables the Registry Editor and Task Manager, changes the Internet Explorer (IE) home page and also modifies registry such that you cannot change the homepage address.





Here are simple steps to get this worm removed from your system:





1) Download this file: http://avsharath.googlepages.com/Disable...





2) Double click on the downloaded file, it will execute to restore from the damage done to registry by the worm.





3) Restart your system.





4) Delete the file svhost32.exe from your Windows folder( If it is present).





5) Delete the file svhost.exe from your Windows folder( If it is present).








And the silly worm's story ends!!!


You can now use the Yahoo messenger peacefully.





By the way, I have a suggestion for you: Use Firefox browser to avoid such worm attacks in future. It is much more secure than the Microsoft Internet Explorer, you can find it at:http://mozilla.com/firefox
Reply:This solution worked well. My anti-virus saw the reg-cleaner as a malicious script, but I allowed it to run anyway and it worked without bad side effects.


? Report Abuse

Reply:How do I get my "run" function back now?:P Report Abuse

Reply:ok...I may have the answer to my own q.


1)manually start regedit from WINDOWS folder.


2) go to HKEY_CURRENT_USER\Software\Mic...


3)change "NoRUN" value to 0 Report Abuse

Reply:Thanx Sharath ur info helped me too. Report Abuse

Reply:there are so many worms that target yahoo messenger at the moment, most will send out random IM's to your friends with urls, or change your current status message along with a clickable url.





it's quite a mission to work it out what you may have as installed virus scanners are often a target (being disabled by the worm) so a clean bill of health from your install AV might in fact be incorrect. If you suspect this is the case online scanner (temporarily disable your currently installed one first though)...





Trend http://housecall.trendmicro.com/housecal...


BitDefender http://www.bitdefender.com/scan8/


F-Secure http://support.f-secure.com/enu/home/ols...


Panda http://www.pandasoftware.com/products/ac...





there are more are listed in http://www.wackyb.co.nz/vb/showthread.ph... if the above aren't suitable :)





follow the steps they recommend for complete removal if automatic repair / quarantine fails





or if any of these look familiar....


W32/Sdbot.worm!4990c306 ~ http://vil.nai.com/vil/content/v_140720....


w32.Kmeth ~ http://www.spywareguide.com/spydet_3149_...


W32/Vanebot-P ~ http://sophos.com/security/analyses/w32v...


W32/Vanebot-R ~ http://www.sophos.com/security/analyses/...


W32/Vanebot-S ~ http://www.sophos.com/security/analyses/...


W32.Imaut.B ~ http://www.symantec.com/enterprise/secur...


W32.Imaut.C ~ http://www.symantec.com/enterprise/secur...


AutoIt.D ~ http://www.f-secure.com/v-descs/autoit_d...


W32/YahLover.worm ~ http://vil.nai.com/vil/content/v_140628....


W32.Yautoit ~ http://www.symantec.com/enterprise/secur...





simply follow the instructions each site provides for removing.
Reply:You may be having a virus. Norton, AVG , Avast are


widely used and effective antivirus software. You can


download these free softwares at


http://tinyurl.com/yahtjk