Hi,
I know I have mentioned this problem in previous posts, but to avoid any confusion I have decided to create a new thread to explain my problem in detail.
I have a worm on my computer (which I think is W32.Yaha.K@mm or something very similar - see
http://securityresponse.symantec.com/avcenter/ven...32.yaha.k@mm.html). I received it through MSN Messenger, a file named 'Best_Friend.scr' (there are many variances) from a contact of mine. It is actually a .exe (executable) file disguised as a screensaver file. I regrettably accepted and ran the file, which has since edited my registry and caused numerous problems.
This worm terminates some antivirus and firewall processes. It uses its own SMTP engine to email itself to all the contacts in the Windows Address Book, MSN Messenger, .NET Messenger, Yahoo Pager, and all the files whose extensions contain the letters HT. The email message has randomly chosen the subject line, message, and attachment name.
This threat is written in the Microsoft C++ language and is compressed with UPX. The uncompressed size is about 75 KB.
I have followed the removal instructions from the Symantec website, but I am stuck on the third step - typing text into the MS DOS window once the command.com prompt has been run. I have to run .com prompts instead of .exe so that the worm does not automatically terminate the process (like it does with AntiVirus etc). It has also edited the registry so useful things like 'Folder Options' from the 'Tools' menu has been removed, so I now cannot view hidden files or change file types.
Once I am able to type in DOS, I can complete the rest of the removal process. I am in desperate need of help in this situation!
Edit by WDZ: threads merged
