#1
  1. Not much of a contributor
    Devshed Beginner (1000 - 1499 posts)

    Join Date
    Aug 2006
    Location
    Hidden
    Posts
    1,012
    Rep Power
    1092

    Yahoo Messenger Worm


    Hi guys,

    My friend got this worm from YM by clicking a link sent out by one of her friends.

    Now I'm fixing her computer. To my surprise, I cannot run an exe except for Firefox.

    I cannot install Hijackthis. I cannot run msconfig or any anti virus. The worm closes it automatically.

    Any input is greatly appreciated.
  2. #2
  3. They're coming to take me away

    Join Date
    Jan 2005
    Location
    Florida
    Posts
    5,105
    Rep Power
    5049
    Originally Posted by zynder
    Hi guys,

    My friend got this worm from YM by clicking a link sent out by one of her friends.

    Now I'm fixing her computer. To my surprise, I cannot run an exe except for Firefox.

    I cannot install Hijackthis. I cannot run msconfig or any anti virus. The worm closes it automatically.

    Any input is greatly appreciated.
    Have you tried Safe Mode?
    "I don't need to get a life. I'm a gamer. I have lots of lives!"
  4. #3
  5. No Profile Picture
    Grumpier old Moderator
    Devshed Supreme Being (6500+ posts)

    Join Date
    Jun 2003
    Posts
    14,443
    Rep Power
    4539
    Can you open a command prompt window? If so try starting a program from the command prompt. You can also try starting programs from the taskmanager. One of these tricks may get you around a hack of explorer. Another from explorer, a shift-Run As sometimes works to start a blocked exe

    There is at least one trojan that adds a gazillion entries in a registry key that effectively blocks all exe programs.

    If you haven't already seen it maybe this google search will be helpful.

    http://www.google.com/search?q=can%2...ient=firefox-a
    ======
    Doug G
    ======
    Bartender to Rene Descartes "have another beer?" Descartes: "I think not" and he vanished.
    --Alfred Bester
  6. #4
  7. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    May 2010
    Location
    Michigan, United States of America
    Posts
    36
    Rep Power
    5
    Originally Posted by hiker
    Have you tried Safe Mode?
    Exactly what I was going to suggest. Boot into safemode, run MalwareBytes off a Flash Drive and you should be all clean.
  8. #5
  9. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Aug 2010
    Location
    New York
    Posts
    20
    Rep Power
    0
    If safe mode doesn't help, check under msconfing/starup programs to see if there's anything listed which shouldn't be there and disable it. You can also terminate unwanted processed from task manager.

IMN logo majestic logo threadwatch logo seochat tools logo