I am the owner of the I-worm/yaha.m virus and have been trying to get rid of it for too many days and need help. It disabled my NAV and my .exe files will not run. I have tried to use the symantec suggestions to no avail because I can,t get to msconfig or safe mode. I downloaded avg antivirus and it finds the virus but won't allow me to delete the infected files (restore files). I am trying to format but it won't allow it through my win-accessories-dos prompt saying that it is being used in another process. I have downloaded and tried the simplysup.com/tremover but it won't install- probably because of the .exe infection. Any ideas? I have not problem with doing a re-format if I could get that far. Thanks for any info.

Go here and download and run exefix08.com. It will repair the .exe file association. http://home.earthlink.net/~rmbox/Reticulated/Only_IE.html Then run the symantec removal tool: http://www.symantec.com/avcenter/tools.list.html/

If you have a ME floppy startup disk you can use it to delete the System Restore files. Enter DELTREE C:\_RESTORE and the files will be deleted.

Thanks for the input but I am unsure of which removal tool to use Tom41 and unfortunately I don't have the ME floppy (I know) so I am going to try Tom41's before I borrow a floppy. I didn't see the virus listed on the removal tool list so is one of them the same for a variation of the virus?

Hi Gary, exefix08 should restore the corrupt .exe file association, enabling you to run all your programs. So you will be able to disable system restore normaly. Here's how to disable it: http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239 The symantec removal tool is here: It will remove this version. **note Yaha.M is the same virus as Yaha.K http://www.symantec.com/avcenter/venc/data/w32.yaha.removal.tool.html No need to borrow a boot disk, You can download one here: http://www.bootdisk.com