Yahoo Messenger Trojan “nsl-school”

Today I recieve a PM from my friends through Yahoo Messenger

have you ever seen such a silly man like this ? http://nsl-school.org/?id=stories =))

(DO NOT click the URL)

this is new trojan that infected your YahooMessenger and MSN Messenger also Internet Explorer. Got the information from here that most of desktop anti-virus have been unable to contain the attack. So, how to fix it? ok, i’ll give you these link, you can try it yourself
“nsl-school.org” – Yahoo Messenger virus/trojen Solution
Yahoo Messenger Virus Attack

Technorati Tags: , , , , ,

One response to “Yahoo Messenger Trojan “nsl-school”

  1. Just Perform the following steps and you will get the solution.

    *****************************************************************************
    0. Search all IExporer.exe and Explorer.exe if it’s in temp directory Delete it and Restart your Computer
    *****************************************************************************

    *****************************************************************************
    1. Copy the following code in a file and save as getregbk.inf
    *****************************************************************************

    [Version]
    Signature=”$OS-Control$”
    Provider=SP

    [DefaultInstall]
    AddReg=UnhookRegKey

    [UnhookRegKey]
    HKLM, Software\CLASSES\batfile\shell\open\command,,,”””%1″” %*”
    HKLM, Software\CLASSES\comfile\shell\open\command,,,”””%1″” %*”
    HKLM, Software\CLASSES\exefile\shell\open\command,,,”””%1″” %*”
    HKLM, Software\CLASSES\piffile\shell\open\command,,,”””%1″” %*”
    HKLM, Software\CLASSES\regfile\shell\open\command,,,”regedit.exe “”%1″””
    HKLM, Software\CLASSES\scrfile\shell\open\command,,,”””%1″” %*”
    HKCU, Software\Microsoft\Windows\CurrentVersion\Policies\System,DisableRegistryTools,0x00000020,0

    *****************************************************************************

    2. Install the right click the getregbk.inf and selecting Install from popup
    *****************************************************************************

    *****************************************************************************
    3. Copy the following code in a file and save as getregbk.reg
    *****************************************************************************
    REGEDIT4

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    “DisableTaskMgr”=dword:00000000

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    “DisableTaskMgr”=dword:00000000

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    “DisableRegistryTools”=dword:00000000

    [HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_buzz]
    “content url”=-

    [HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_Launchcast]
    “content url”=-

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    “Start Page” = “http://www.yahoo.com”

    [-HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\Homepage]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    “Task Manager”=-

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    “Svchost”=-

    *****************************************************************************

    *****************************************************************************

    4. Right click the getregbk.reg and selecting mearge from popup
    *****************************************************************************

    *****************************************************************************
    5. Enable Run in start
    ****************************************************************************
    Open command prompt type regedit to open registry editor.
    Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
    Double-click NoRun on the right pane and change it to from 1 to 0.
    To restore the Run command, reverse the steps by changing 0 to 1.

    *****************************************************************************
    6. Get Default Page in internet explorer
    *****************************************************************************

    HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel
    Double-click Homepage on the right pane and change it to from 1 to 0.
    Open any local stored .html or other web page or turn internet off and then open internet explorer
    set the default page as blank or page of your choice

    *****************************************************************************

    Suka

Tinggalkan Balasan

Isikan data di bawah atau klik salah satu ikon untuk log in:

Logo WordPress.com

You are commenting using your WordPress.com account. Logout / Ubah )

Gambar Twitter

You are commenting using your Twitter account. Logout / Ubah )

Foto Facebook

You are commenting using your Facebook account. Logout / Ubah )

Foto Google+

You are commenting using your Google+ account. Logout / Ubah )

Connecting to %s