Please help... I got the yaha.m virus, and I have been trying to get rid of it. I have downloaded every antivirus tool, and tried all their hints ect... I think the main problem is that I have windows ME and I can't dissable the restore function, so I can't delete the virus infected files. When I try doing this under systems in control pannel, it says error and can't find when I try to open, or when I try properties under my computer, the same message of error, and can run program. Can someone please help, and in basic terms, because I am lost.... sorry for the trouble, but thanks for the time... Don Walker

I just removed that virus from a 98 machine using Norton's AV 2003. Have you tried that yet?

Yaha.M is the same as Yaha.K Go here and download and run the removal tool: http://www.symantec.com/avcenter/venc/data/w32.yaha.removal.tool.html

The probles is that I can't disable the restore funtion, so these files can never be erased. When I try to open properties on my computer, the virus stops me, and says can't find C:\window rundll.exe, an error notice, how can I get around this... thanks for the suggestion though, is there anyyone else with an idea? please, please, please.... I tried the symantec tool, but it won't work, finds them, but then can not do anything with them...

Go here and download and run exefix08.com Then try to disable system restore. http://home.earthlink.net/~rmbox/Reticulated/Only_IE.html

Hello Don, To be easier about the 3 variants of the Yaha trojan virus, try the program Trojan Remover version 4.95, you find it at the following web adddress: http://www.simplysup.com/tremover/details.html This program erase as well the spread as the worm connected to it... and restore all files corrupted to the original version as it was before.... not bad....

Find your Windows ME startup boot diskette, or make one on a working machine. Boot from the Windows ME diskette, enter the command at the DOS A:\ prompt: DELTREE C:\_RESTORE This will delete all the Windows ME restore files on your system. Reboot and run the AV programs again and see if traces of the virus are still found.