quote:
Originally posted by Jimbodude
quote:
Originally posted by TheGuruSupremacy
quote:
Originally posted by Jimbodude
Help, im infected with this! My anti virus hasn't picked it up but i know its there because every few minutes, while im on the interent, the firefox search bit at the bottom comes up and it automatically types in holy shit, have a look at this!!!!!! www.windowslivemessenger.biz/msn/msn.php?s=S&id=7519&profile=$msnaddy which is the website of the virus
Please, has anyone got a way of clearing this virus?
Have you seen my post?
Yup, and i read that thread and its talking about a complete different virus as when i try and end the sxshost.exe or whatever, it says there is no such process
No it's the same virus...Only process is called svchost and not svshost...
However i have downloaded and tested the virus....If you follow my instructions you will be able to clean it
:
First Open TaskManager(CTRL+ALT+CANC)
Search process called svchost but pay attention the UserName of it must be the same of your user(not SYSTEM,see the image to understand)
http://img83.imageshack.us/my.php?image=myscreenshot10fj0.jpg
Then:
Download and import this script:
ContactInfoDeleter(By TheGuruSupremacy)
After import the virus will be deleted
....
Note:TO USE A SCRIPT YOU MUST HAVE MESSENGER PLUS INSTALLED YOU CAN DOWNLOAD IT:
MessengerPlusLive
If everythings is ok the debug log could be:
Funzione chiamata: OnEvent_Uninitialize
Script in caricamento(Script is loading)
Lo script è ora caricato e pronto.(Script is loaded and ready)
Funzione chiamata: OnEvent_Initialize
Virus found at C:\Windows\system32\yshmbgq\svchost.exe ----->the path could be Different
Trying to delete a file....
File has been removed
Registry Keys has been removed
Hope to have been useful
/ 
