Many 'victims' have not been able to kill YM virus properly

Although the Hanoi University of Technology BKIS Network Security Center insists on updating 9 "made in Vietnam" worms into the latest Bkav version, many people still cannot destroy them. The reason is due to the failure of the "sweeping" process.

Many mail readers wondered if they had downloaded the BKav894 version, but there was no virus when scanning. The BKIS Center thinks that this may be the case because users only download the software and run the removal program.

Many 'victims' have not been able to kill YM virus properly Picture 1

The link containing the virus "non" straight to the status line makes many people trapped.Screen shot .

The right way is to do the following: download Bkav894 to your computer, after installing, restart the computer, press F5 or F8 to run Windows Safe Mode. After restarting the computer, start running Bkav894 software to kill.

In case of using Bkav894 to kill virus, the homepage of Internet browser is still the page like daokhu . be , nhut . be , VuiVeVn . ms . Then the computer is no longer virus and can follow the steps below to reset the homepage for Internet browser.

- Click here to download the file fix_reg.vbs to a folder on your computer.

- Run the file fix_reg.vbs just downloaded by double-clicking on it.

Some phenomena appear on the victim's computer when infected with a virus transmitted through Yahoo Messenger (YM) recently:

1. If you are logged into YM, after a period of time, a series of chat windows automatically pop up and send messages to the nick in the user's address book. These messages look like this:

- http:///Vui.HP.MS <=== Toan` you? de ^ ~ thuong: D: D =))

- http:///Vui.HP.MS <=== Bo? What time does it take for the web to go, to you? de ^ ~ thuong: D: D =))

- Have fun! Ca buong roi ne . http:///nhut.be

2. Do not run the Registry editor ( Regedit ).

3. Cannot run the program to view the Task Manager information .

4. IE home page is edited into one of the following forms:

- http:///nhut.be

- http:///vuivevn.ms

- http:///daokhuc.be

5. The title of the IE window will be added to a string of the form:

- Nhut.be :: Kevin Duong's Blog :: What do you think .

- wWw.VuiVeVn.Hp.Ms Community

- Dao Khuc Community :: What do you think .

6. When logging into YM, you will see YM's Buzz and Launchcast pages as one of the following pages:

- http:///nhut.be

- http:///vuivevn.ms

- http:///daokhuc.be

Nguyen Hang