tag:blogger.com,1999:blog-354847262011-04-21T19:25:11.701-07:00Sajin Kokkadhttp://www.blogger.com/profile/08612657538924609656noreply@blogger.comBlogger11100tag:blogger.com,1999:blog-35484726.post-1159955854493908312006-10-04T02:53:00.000-07:002006-10-04T03:08:48.563-07:00Last day, a link appeared on an instant messenger window that seemed to be sent by one of my friend. I clicked on it. The link read, "A new virus has been found, click the link to know more and remove it".<br /><br />After clicking the link, another web page loaded and suddenly my firewall (Sygate Personal firewall, free edition, really recommendable) shown that an applicaiton (somename.exe) is trying to access a remote system. The application name was not familiar for me and I blocked its access. This was the starting of my two day mess.<br /><br />As soon as I blocked the access, my yahoo messenger's menu automatically activated and<br />{it performed sending the link which I have got earlier to all in my messenger list.<br />I found it as an malware activity and I suddenly typed and sent another message not to click on that link.<br />I loggged off<br />When I later logged-in, this activity again happened.<br /><br />I tried with Norton Anti-Virus, but no use.<br />Then, I tried with ad-aware se personal, it found some errors.<br />The most interesting tool I have found accidently was SpyWare removal tool at Netscape browser. It detected all the worm and removed it.<br /><br />I restarted the machine, and on taking the IE, the homepage was again found hijacked. I again run Ad-Aware SE and then, Netscapte spyware removal tool.<br /><br />The entried I got were, 1. svchost32.exe<br />2. svhost.exe<br />3. manina~1.exe<br /><br />I searched the registry, and the system, and removed all entries found with this name.<br /><br />I have neither restarted my system nor logged in to Yahoo messenger. After that i will update this.<br /><br />I m sorry for writing this blog in a very short manner. But time constraint. I will soon update.<br />}<br /><br />Regards,<br />Sajin Kokkad<div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/35484726-115995585449390831?l=sajinspeaks.blogspot.com' alt='' /></div>Sajin Kokkadhttp://www.blogger.com/profile/08612657538924609656noreply@blogger.com1