HELP!!!!!! Virus: I love you my sweet sexy poooooh..........

[aquart]

Anybody heard of this monster? I went to dinner, left my pc on, came back and found Norton Antivirus hysterically running a scan, begging me to delete some files which couldn't be quarantined, which I did. Then it told me I was still infected. I ran Update, installed new definitions (not that new, I only installed Antivirus 2002 two days ago)and rebooted. Oh, dear.

The first thing that was destroyed was my access to Norton Antivirus itself. This thing seems to have a special hatred for all my Symantec products. (Not unlike my feelings, just now.)

Anyway, the screensaver this disease gives me is light blue with I love you, my sweet sexy poooooh........ running across the screen. Anyone know what to do about it? I see reformatting in my future, don't I?

I know it's still doing damage, because it was running my hard drive like mad a while ago.

HELP!!!!!

[will work 4 food]

1. You must

unplug your computer immediately, take it outside away from the house (at least 30 feet). This is an exploding virus. Be berry careful. :argh:

[4morewars]

2. You have Yaha !

Or more precisely; W32.Yaha.AB@mm A nasty little trojan worm. The good news is:It can be fixed !!! It is not doing anymore "damage" (it sounds like it has already done it's damage) as you said, but it is a busy little fucker. No need to reformat, you should be able to handle the repair (I'm assuming,since you know how to reformat, you know a few things about "puters?) Go here and follow the instructions :

http://securityresponse.symantec.com/avcenter/venc/data/[e-mail]

Make some coffee, good luck !!!

PS: Ever heard of LINUX ?

[aquart]

5. Linux requires more knowledge than I yet have.

[4morewars]

8. LINUX is easier than you think !

The latest releases are more user friendly than in the past. But you can think about that tomorrow, right now you have other problems !!

[aquart]

6. Question?

This thing disabled Norton Antivirus. And Live Update. And Crash Guard. It won't load and it won't uninstall. Will the security response repair that damage?

[aquart]

7. I already screwed up.

The first thing I did when I got back online was download the intelligent updater stuff and install it. They CAUTION NOT to install it.

I'm screwed, right?

[4morewars]

9. No, you are not done yet !

This is what you need to do:
1. Download the updated virus definitions using the Intelligent Updater, but do not install them.
2. Restart the computer in Safe mode.
3. Copy the Regedit.exe file to Regedit.com.
4. Edit the registry and reverse the changes that the worm made.
5. Restart the computer in Normal mode.
6. Start your Symantec antivirus software. If it does not properly start or function, re-install it.
7. Install the Intelligent Updater virus definitions that you downloaded earlier.
8. Run a full system scan and delete the files that are detected as W32.Yaha.AB@mm and Keylogger.Trojan.


The security response will not do it for you, you have to do it manually. Near the bottom of the page you will find detailed instructions. Here is the link again:

http://securityresponse.symantec.com/avcenter/venc/data/[e-mail]

[aquart]

10. But...but...I INSTALLED when they told me NOT to. With a CAUTION.

I'm over there right now, copying everything by hand since I also can't use my printer which is a whole other installation problem.

Has anyone ever introduced a trouble free pc into their home? This one is second hand and there wasn't a clean install. I like some of the software I don't have disks to, so I didn't reformat. I may go insane over this.

BTW, I didn't thank you for your help: THANK YOU!!!!!!!!!!!!!

[4morewars]

11. Hey , you're welcome !

No problem, I have been down this road MANY times ! I know I could fix this for you in about 30 minutes, but you WILL learn from this, LOL !
I trust you will be MUCH more cautious in the future. Regarding that, pay attention to the section entitled "reccomendations" where they list "best practices"

To answer your question,"Has anyone ever introduced a trouble free pc into their home?"
YES ! MAC and LINUX are immune to this crap(with one or two MINOR exceptions, which have already been addressed)

PS: Luckily for you I have chronic insomnia ! I am in Michigan and I will be willing to talk you through this on the phone later today(saturday) if you run into any problems, but right now I think I will try to get some sleep, Peace, JOE

[aquart]

12. Sleep. Me, too.

I've copied the instructions, but I don't think you can talk me thru in safe mode. Thank you so much, though. I was in shock earlier. Now, just exhausted.

And if I ever, ever meet the little prick who did this..........

No jury would convict me.

[aquart]

13. You would talk to me on phone? That's so kind.

This afternoon I think I am going to risk getting stranded uptown by subway flooding and go for poll watcher training at Columbia.

But I wrote your DU id name on top of the Symantec instructions and you can expect to hear from me again.

Cripes, I just remembered I can't get email. The monster removed my Send Receive. Weird. Weird and evil. But I'll check back here for messages.

[4morewars]

14. You are from NYC ?????!!!!

I am from NYC too !! Born and raised there (and, later, the 'burbs) God, I miss ny, the ocean !!!, GOOD pizza !! Chinatown !!!! The subway is flooded? damn, that's nasty. Glad to hear you are going to be a poll watcher !!! I have been working with the Kerry campaigh here in Michigan, and I have met both Kerry and Edwards !!!
Anyway, we can use the PM function here on this board if we have to, I'm sure we can fix your 'puter !
Peace, JOE

[ofrfxsk]

3. A cold shower?

I dunno.

[aquart]

4. Welcome to DU.

Building up your post count?

Looking forward to seeing what else you have to say.