Search:  In

 Yautoit - Description


 Browse by name

 
 | misc | a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Description:
Yautoit is an Internet worm that spreads through instant messages using the Yahoo! Instant Messenger program. Once executed, the parasite secretly installs itself to the system and starts a spreading routine. It sends bogus messages containing links to malicious web pages to other Yahoo! Instant Messenger users. Then Yautoit runs a payload. The worm changes the Internet Explorer default home page, disables the Task Manager and the Registry Editor, modifies some Yahoo! Instant Messager settings. The parasite also changes titles of Internet Explorer windows and locks the home page. Yautoit runs on every Windows startup.


Alias:

Category:
Worms

Automatic Removal: Most effective removal tool is: Easy SpyRemover

Manual Removal:



Stop Runnin Processes:
taskmng.exe


Unregister DLLs:



Clean Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Task Manager
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools=1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr=1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page=[site address]
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\Homepage=1
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title=[site address and text]
HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_buzz\Content URL=[site address]
HKEY_CURRENT_USER\Software\Yahoo\pager\View\YMSGR_Launchcast\Content URL=[site address]



Remove Files:
taskmng.exe
   


Latest Spyware Threats
    Comodo Trust Toolbar
    XP Antispyware 2009
    Antivirus 2010
    Freview
    RegistryGreat
    XPAntivirus
    Windows Antivirus 2008
    IE AntiVirus
    SpywareQuake 4
    Antivirus XP
    SecurePCCleaner
    Trojan.FakeAlert



Copyright © PcRepairCentral, 2005.