problems with W32/YahLover

[apaullo]

hi to all techspot enthusiasts!!



just wanna ask about this worm w32/YahLOver...this monster has already decided to reside in my PC..

now all USB thumbdrives that was inserted in my PC are automatically infected...

i think it has something to do with this pop-up Iauto-it ..but im not that sure...

how you guys can help me with my problem...

 

[N3051M]

read this, post the log files as attachments after.
https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/

 

[howard_hopkinso]

Very Important: Before deciding whether you should clean or reformat your system, go and read this thread HERE and decide what it is you want to do.

If after reading the above, you wish to clean your system, do the following.

Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

Post fresh HJT, AVG Antispyware and Combofix logs as attachments into this thread, only after doing the above.

Also, let me know the results of the Panda Antirootkit scan.

Regards Howard

This thread is for the use of apaullo only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[apaullo]

hi sir howard gud day!!

sorry took me awhile to reply..

ummm...i work as an employee in a government agency and we have more than 2000 pc's..and i cant possibly pose all the HJT logs..maybe there is a antivirus that u can recommend that can detect and delete this specific worm

 

[howard_hopkinso]

See this report on the W32/YahLover infection.

It`s a very serious infection and will no doubt have added other malware as well.

You should immediately tell your IT boss about this.

Regards Howard

This thread is for the use of apaullo only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[bleuken]

hi pau, i have encountered YahLover on our computers in our school and it really not that easy to remove every single infection of it. But I removed it manually. I agree w/ sir howard it is a serious infection.

My posts are at https://www.techspot.com/vb/showthread.php?p=569187#post569187