Virus that is disabling programs and regedit

[drummond]

I got an email from a name that I know well it said "Learn how to love, check the attached screen saver and feel the fragrance of true love"Knowing this guy he is always sending me jokes, so I open it and the attatchment said " love.SCR 34.4kb" man now I screwed myself my norton anti virus and my norton internet security disabled itself and I cant get into my regedit nor can i uninstall the norton programs.
Any help please. hope I can fix and not have to format.I am running windows XP...............drummond

 

[SESaskDFC]

Howdy:

You have been had by the W32.Yaha.K@mm virii.. When was the last time you updated your virii definitions??

For detailed removal instructions, go to the following url..

http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.k@mm.html

You could also try going to

http://www.antivirus.com

and run their free online scanner..

Murray

 

[drummond]

Thank you Murray, When I run the house call it showed I have 16 infected files, I could only get ride of 6 of them the once left are all "Windows\system 32" files. I tried following there instructions to get into Run but the window will only stay there for a few seconds. with me running XP I am disabling System restore. Now when I run FixYaHa.Com from norton it says I have no YaHa virus on my system( think I am going to go to some other anti virus software)I still get the Norton window popping up for a split second.Is there anything else I can do or do I have to " Format"( Hope Not)I tried the restore but it gives me nothing before yesterday.Thanks again for your help and any other suggestions would be greatly appreciated.............drummond

 

[SESaskDFC]

Did you go into Registry and remove all the files in there as well??

Murray

 

[drummond]

Murry it won't let me into Regedit, it flashes up for a couple of seconds, tried it in safe mode also no luck.........drummond

 

[SESaskDFC]

Try the Norton online scanner now.. This virii has the ability to disable av programs thus, it looks as though it is gone or not even there even though it still is.

Murray

 

[drummond]

Thanks Murry, Just ran the norton online scan, it still says I have no infected files, McAfee says I have 9, houscall says I have 9, Regedit pops up for 5 seconds...........drummond

 

[SESaskDFC]

McAffee has a free DOS av program available on their site.. I suggest you download and run it through DOS..

All I can give you are the fixes available from the masters themselves, the AV program people.. I don't have a magical wand I can wave and clear your system.

Just curious as to how you managed to get infected while running Norton or did you NOT keep the virii files updated or was the install after you became infected !!!!

Murray

 

[drummond]

Murry thanks for your help, I kept my virus definition up to date, but that sucker got me, i formatted and alls well now...............drummond