If you are getting messages from your yahoo messenger friends something like this – “happy sankranti/pongalhttp://crackspider.net/” , your pc is infected with a worm which is harmful and you need to make sure you get rid of it asap. The threat levels of this virus is Low but still its recommended to get it removed from your pc. After searching on the web i found that Symantec was the first to discover this virus and has announced that this virus has got multiple names ie W32/Sohana-AX [Sophos], W32/Sohana-AZ [Sophos], W32/Sohana-BA [Sophos], Win32/Spideyit.A [Computer Associates], W32/AutoRun-HA [Sophos]
W32.Imaut.CN is a worm that spreads through Yahoo! Instant Messenger and network shares. It may also download potentially malicious code on to the compromised computer. This worm is currently effecting the following operating systems – Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP which means the Mac guys are secured and they dont have to worry about anything.
Process to Remove this Worm :
1. Disable System Restore (Windows Me/XP).
2. Update the virus definitions.
3. Run a full system scan.
4. Delete any values added to the registry.[Detailed Version]
Thanks for the post I will try it. My story is:
I was sent a yahoo instant message by a contact, the message said: contactpersonIMname: Look at this picture ht8tp://www.messengermsnimages.net/yah/yahoo-image293.jpg/ (Please don’t click on that link because it might give you a virus) When I clicked on it the image link was broken in Firefox, so of course I tried to open it in IE 7 as well. After it didn’t opened I tried to talk to my friend over IM but got no response. Then I started to panic and realized I probably just opened a virus. I called the person from whom the im came, and of course he said he never sent it. This happened on Monday March 2, 2009. So now I am in virus city. My computer locks up and there is a red dot on top of a skull and cross bones icon in the system tray that when I roll over it, it disappears. In the task manager that icon swithches and says it is different applications, like Windows Media Player, and HP Imaging Tools. It disguises iteself as different programs and says they are unavailable. I have run my Norton 2009 full system scan several times and it finds no virus, yet I am pretty sure I have a virus. 🙁