<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Yahoo Messenger virus on the loose!</title>
	<atom:link href="http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/</link>
	<description>Philippines, Technology News &#38; Reviews</description>
	<pubDate>Sun, 12 Oct 2008 09:31:43 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.2</generator>
		<item>
		<title>By: pandu</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-248920</link>
		<dc:creator>pandu</dc:creator>
		<pubDate>Thu, 11 Sep 2008 15:45:33 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-248920</guid>
		<description>s even i'm facing the same problem</description>
		<content:encoded><![CDATA[<p>s even i&#8217;m facing the same problem</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: david</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-245704</link>
		<dc:creator>david</dc:creator>
		<pubDate>Tue, 05 Aug 2008 01:40:22 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-245704</guid>
		<description>pa help nmn...my virus YM q peo hndi xa tgalog prang indonesian e,..ng se2nd 2 ol xa ng link...
n de2tect nmn xa ng UST scandal remover q, peo pg bukas mu ul8 aun nndun nnmn...</description>
		<content:encoded><![CDATA[<p>pa help nmn&#8230;my virus YM q peo hndi xa tgalog prang indonesian e,..ng se2nd 2 ol xa ng link&#8230;<br />
n de2tect nmn xa ng UST scandal remover q, peo pg bukas mu ul8 aun nndun nnmn&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: PCSecurityExpert</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-242399</link>
		<dc:creator>PCSecurityExpert</dc:creator>
		<pubDate>Tue, 15 Jul 2008 13:13:16 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-242399</guid>
		<description>Nearly all AIM's are vulnerable because millions of people use then and few care about security. Programmers also concentrated more on design features than on security.</description>
		<content:encoded><![CDATA[<p>Nearly all AIM&#8217;s are vulnerable because millions of people use then and few care about security. Programmers also concentrated more on design features than on security.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: charles</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-215134</link>
		<dc:creator>charles</dc:creator>
		<pubDate>Fri, 29 Feb 2008 14:48:58 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-215134</guid>
		<description>help po! un virus na AVI UST SCANDAL! badtrip una sa pc ko lng tpos un open ko laptop ko nagkaroon nadin ng gnun virus!!! help po nmn pano irecover to! email me at charlian2002@yahoo.com i really need to know how to recover this virus thanks!</description>
		<content:encoded><![CDATA[<p>help po! un virus na AVI UST SCANDAL! badtrip una sa pc ko lng tpos un open ko laptop ko nagkaroon nadin ng gnun virus!!! help po nmn pano irecover to! email me at <a href="mailto:charlian2002@yahoo.com">charlian2002@yahoo.com</a> i really need to know how to recover this virus thanks!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joven</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-211996</link>
		<dc:creator>Joven</dc:creator>
		<pubDate>Sat, 19 Jan 2008 12:38:39 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-211996</guid>
		<description>My computer is OK now. Download avast home edition and everything will be taken care of.</description>
		<content:encoded><![CDATA[<p>My computer is OK now. Download avast home edition and everything will be taken care of.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joven</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-211944</link>
		<dc:creator>Joven</dc:creator>
		<pubDate>Fri, 18 Jan 2008 13:07:24 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-211944</guid>
		<description>here is my email add nga pala josh72201@yahoo.com</description>
		<content:encoded><![CDATA[<p>here is my email add nga pala <a href="mailto:josh72201@yahoo.com">josh72201@yahoo.com</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joven</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-211943</link>
		<dc:creator>Joven</dc:creator>
		<pubDate>Fri, 18 Jan 2008 13:04:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-211943</guid>
		<description>Help naman po I have the same AVI.Funny scandal virus. It is malfunctioning may Excel and printers.</description>
		<content:encoded><![CDATA[<p>Help naman po I have the same AVI.Funny scandal virus. It is malfunctioning may Excel and printers.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: A Piece of Idea</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-211696</link>
		<dc:creator>A Piece of Idea</dc:creator>
		<pubDate>Sun, 13 Jan 2008 17:16:33 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-211696</guid>
		<description>What's that YM virus tagalog version. My girlfriend actually got that virus also. Is there any way to get rid of it?</description>
		<content:encoded><![CDATA[<p>What&#8217;s that YM virus tagalog version. My girlfriend actually got that virus also. Is there any way to get rid of it?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jason</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-211276</link>
		<dc:creator>jason</dc:creator>
		<pubDate>Mon, 07 Jan 2008 16:36:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-211276</guid>
		<description>me i have also ym viruses tagalog version i cannot do want is the right , or how to remove that its that " funny scandal" its my enemy virus of all?
plz contact me at my ym at " jasonblue2008" plz help me how i can removre this</description>
		<content:encoded><![CDATA[<p>me i have also ym viruses tagalog version i cannot do want is the right , or how to remove that its that &#8221; funny scandal&#8221; its my enemy virus of all?<br />
plz contact me at my ym at &#8221; jasonblue2008&#8243; plz help me how i can removre this</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Farah L.</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-210339</link>
		<dc:creator>Farah L.</dc:creator>
		<pubDate>Sat, 29 Dec 2007 15:20:04 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-210339</guid>
		<description>The other day I clicked on a file transfer that I thought was sent by my chatmate but I was wrong; the file is skyflake.  What I did was download &#38; save it to my desktop then run my anti virus on said file before I opened it.  I just want to know if this is a virus coz last night I emailed some pics but I was told there's one in those I sent that can't be opened because something was attached to it that my chatmate's anti virus won't open.  If this is a virus, did it already start to spread by attaching something to my attachments?  Please, if anybody could tell me if this is the latest virus that plugs ym &#38; suggest how to get rid of it, although I deleted the file already, would be most appreciated. TY.</description>
		<content:encoded><![CDATA[<p>The other day I clicked on a file transfer that I thought was sent by my chatmate but I was wrong; the file is skyflake.  What I did was download &amp; save it to my desktop then run my anti virus on said file before I opened it.  I just want to know if this is a virus coz last night I emailed some pics but I was told there&#8217;s one in those I sent that can&#8217;t be opened because something was attached to it that my chatmate&#8217;s anti virus won&#8217;t open.  If this is a virus, did it already start to spread by attaching something to my attachments?  Please, if anybody could tell me if this is the latest virus that plugs ym &amp; suggest how to get rid of it, although I deleted the file already, would be most appreciated. TY.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: michale guevarra</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-208871</link>
		<dc:creator>michale guevarra</dc:creator>
		<pubDate>Mon, 10 Dec 2007 13:20:04 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-208871</guid>
		<description>hello po ulet just wanna share how i remove the AVI funny ust scandal on my pc. i just download the AVAST anti virus it realy working hard. so now i can used my pm in good condition again... i got the AVAST on this site www.avast.com</description>
		<content:encoded><![CDATA[<p>hello po ulet just wanna share how i remove the AVI funny ust scandal on my pc. i just download the AVAST anti virus it realy working hard. so now i can used my pm in good condition again&#8230; i got the AVAST on this site <a href="http://www.avast.com" rel="nofollow">http://www.avast.com</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jake</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-208582</link>
		<dc:creator>jake</dc:creator>
		<pubDate>Thu, 06 Dec 2007 10:39:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-208582</guid>
		<description>patulong nga....!!! ayaw kasing mawala ung scandal sa ym ko ito pala email ko..gomez.jake@yahoo.com thanks...!!!</description>
		<content:encoded><![CDATA[<p>patulong nga&#8230;.!!! ayaw kasing mawala ung scandal sa ym ko ito pala email <a href="mailto:ko..gomez.jake@yahoo.com">ko..gomez.jake@yahoo.com</a> thanks&#8230;!!!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: michale guevarra</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-208304</link>
		<dc:creator>michale guevarra</dc:creator>
		<pubDate>Sun, 02 Dec 2007 14:29:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-208304</guid>
		<description>GOOD DAY TO ALL ABOUT AVI UST SCANDAL FILES, I ALREADY RESTORE MY PS TO THE DATE I KNOW IT WAS WORKING PROPERLY, BUT AFTER THE RESTORING I AGAING CHECK MY WINDOW &#38; FREPETCH IT STILL THERE. STILL I CANT OPEN SYSTEM32 &#38; RUN PROGRAM... PLEASE HELP ME I DONT KNOW WHAT TO DO WITH THIS FILE, I CANT USE MY PC PROPERLY... HELP ME PLEASE...
XXX_STIFLER_XXX@YAHOO.COM</description>
		<content:encoded><![CDATA[<p>GOOD DAY TO ALL ABOUT AVI UST SCANDAL FILES, I ALREADY RESTORE MY PS TO THE DATE I KNOW IT WAS WORKING PROPERLY, BUT AFTER THE RESTORING I AGAING CHECK MY WINDOW &amp; FREPETCH IT STILL THERE. STILL I CANT OPEN SYSTEM32 &amp; RUN PROGRAM&#8230; PLEASE HELP ME I DONT KNOW WHAT TO DO WITH THIS FILE, I CANT USE MY PC PROPERLY&#8230; HELP ME PLEASE&#8230;<br />
<a href="mailto:XXX_STIFLER_XXX@YAHOO.COM">XXX_STIFLER_XXX@YAHOO.COM</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: oobi</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-208024</link>
		<dc:creator>oobi</dc:creator>
		<pubDate>Thu, 29 Nov 2007 16:38:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-208024</guid>
		<description>I found this pdf file that analyzed the malware:

http://geocities.com/rahulmohandas/hacking_the_malware.pdf

Regarding the AVIFunny file.  This is also detected by AVG but is not healed by AVG.  I was able to manually delete the malware files of a friend, but with difficulty.  It has a self regenerating mechanism also as follows:  registry autoloads (see above list and use edit find command in the regedit to be sure such registry entries are not stored anywhere else).  It also put sporious lsas.exe and smss.exe files, in the windows directory (there are legitimate files of these names used by windows - under windows task manager, the legit files will shutdown windows if the process is stopped).  Infected file in WINDOWS\system32\drivers\etc was also found. It created files in the windows/prefetch folder (some of these entries initially refused to be deleted  (You may try to open it with notepad and if prompted that no such file exist, create one with the same name of your own just to be sure).  malware files are also found in all other partition or separate hard disk.  Search and delete carefully the malware files and cure registry settings while modem is unplugged and in safe mode.  Run AVG again after (still unplugged to the internet, if still detected, repeat the process again).</description>
		<content:encoded><![CDATA[<p>I found this pdf file that analyzed the malware:</p>
<p><a href="http://geocities.com/rahulmohandas/hacking_the_malware.pdf" rel="nofollow">http://geocities.com/rahulmohandas/hacking_the_malware.pdf</a></p>
<p>Regarding the AVIFunny file.  This is also detected by AVG but is not healed by AVG.  I was able to manually delete the malware files of a friend, but with difficulty.  It has a self regenerating mechanism also as follows:  registry autoloads (see above list and use edit find command in the regedit to be sure such registry entries are not stored anywhere else).  It also put sporious lsas.exe and smss.exe files, in the windows directory (there are legitimate files of these names used by windows - under windows task manager, the legit files will shutdown windows if the process is stopped).  Infected file in WINDOWS\system32\drivers\etc was also found. It created files in the windows/prefetch folder (some of these entries initially refused to be deleted  (You may try to open it with notepad and if prompted that no such file exist, create one with the same name of your own just to be sure).  malware files are also found in all other partition or separate hard disk.  Search and delete carefully the malware files and cure registry settings while modem is unplugged and in safe mode.  Run AVG again after (still unplugged to the internet, if still detected, repeat the process again).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Rain</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-207936</link>
		<dc:creator>Rain</dc:creator>
		<pubDate>Wed, 28 Nov 2007 05:22:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-207936</guid>
		<description>that kind of virus was infected my pc (twice!!)..  Solution: Restore my pc to the time when it is in good condition.. and after that, I scanned my registry using registry mechanic program. Just as simple as that.. if you have any comments about this, please email me @ rain_race03@yahoo.com.ph
http://rainrace.blogspot.com</description>
		<content:encoded><![CDATA[<p>that kind of virus was infected my pc (twice!!)..  Solution: Restore my pc to the time when it is in good condition.. and after that, I scanned my registry using registry mechanic program. Just as simple as that.. if you have any comments about this, please email me @ <a href="mailto:rain_race03@yahoo.com.ph">rain_race03@yahoo.com.ph</a><br />
<a href="http://rainrace.blogspot.com" rel="nofollow">http://rainrace.blogspot.com</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: michale guevarra</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-207919</link>
		<dc:creator>michale guevarra</dc:creator>
		<pubDate>Wed, 28 Nov 2007 01:37:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-207919</guid>
		<description>please help me on how can i remove this AVI UST FUNNY SCANDAL. coz i'm afraid to open my yahoo messager now. coz i dont want any of my friends got this too. please email me herse my email add dy3_quicksilver@yahoo.com help me please</description>
		<content:encoded><![CDATA[<p>please help me on how can i remove this AVI UST FUNNY SCANDAL. coz i&#8217;m afraid to open my yahoo messager now. coz i dont want any of my friends got this too. please email me herse my email add <a href="mailto:dy3_quicksilver@yahoo.com">dy3_quicksilver@yahoo.com</a> help me please</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: michale guevarra</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-207917</link>
		<dc:creator>michale guevarra</dc:creator>
		<pubDate>Wed, 28 Nov 2007 01:34:21 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-207917</guid>
		<description>please help me on how can i reamove this AVIFUNNY UST SCANDAL to my pc. someone send me offline meessage but i didnt accept it coz im not sure what it is. but it already enter my pc how many times i delete it. but it still there i cant open now my RUN and system32.please if anyone can help me on how to remove it please reply...</description>
		<content:encoded><![CDATA[<p>please help me on how can i reamove this AVIFUNNY UST SCANDAL to my pc. someone send me offline meessage but i didnt accept it coz im not sure what it is. but it already enter my pc how many times i delete it. but it still there i cant open now my RUN and system32.please if anyone can help me on how to remove it please reply&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jervin domingo</title>
		<link>http://www.yugatech.com/blog/personal-computing/yahoo-messenger-virus-on-the-loose/#comment-185701</link>
		<dc:creator>jervin domingo</dc:creator>
		<pubDate>Mon, 19 Nov 2007 10:44:28 +0000</pubDate>
		<guid isPermaLink="false">http://www.yugatech.com/blog/?p=1295#comment-185701</guid>
		<description>how do i remove this kind of virus... my friend tells me i send this kind of message:

ình di?n xi?c "r?n tóc gáy"   freewebtown.com/gaigoitanbinh/index.html 


but on my end i am not sending any..

please email me @ jervin_roddick@yahoo.com

i would really appreciate if you can email me on how to delete this.. thanks</description>
		<content:encoded><![CDATA[<p>how do i remove this kind of virus&#8230; my friend tells me i send this kind of message:</p>
<p>ình di?n xi?c &#8220;r?n tóc gáy&#8221;   freewebtown.com/gaigoitanbinh/index.html </p>
<p>but on my end i am not sending any..</p>
<p>please email me @ <a href="mailto:jervin_roddick@yahoo.com">jervin_roddick@yahoo.com</a></p>
<p>i would really appreciate if you can email me on how to delete this.. thanks</p>
]]></content:encoded>
	</item>
</channel>
</rss>
