Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
this worm has infected my system, I know which files it is but I cant delete them because they are in use. Normally i would go into task manager and end the task but that's notworking because the worm shut task manager down when i open it. Is there a way for me to kill a task from Command?

I believe this little program will scan your PC for Yaha.
http://download.nai.com/products/mcafee-avert/stinger.exe

lol Brian, that's totally unfair man. Yaha disables most (if not all) anti-virus software, as well as a huge number of system services which makes it extremely difficult to get rid of.
Ray, try this site, it should be able to help you out: http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.k@mm.html
They have a lot of info on this virus as well as the steps to get rid of it. Good luck man, you are the 6th person today I have heard about getting this virus. You would think people would stop opening email attachments.... :-/

Have you tryed safe mode or safe mode with command prompt?
You can kill the task without the taskmanager. Open the command prompt (start>run>cmd) and type
taskkill /f /im taskname.exe
If you don't know the task name type tasklist /svc into the command prompt and see if you can tell which one is the worm.
Sandman

I repeat my earlier statement.
If you have a good Anti Virus application, one that is current [ released in the last 12 months, and keep the virus definitions u to date with weekly downloads] you should not have a problem.
Norton's Anti Virus will detect and protect a PC from this worm.
Anyone who emails or surfs should not go there without the proper system protection.
I may be harsh, but how many times does one read warnings before one takes heed.
To ensure that YOU are not affected with this worm:
Start your Symantec antivirus program and make sure that it is configured to scan all the files.
Run a full system scan.
If any files are detected as infected with W32.Yaha.K@mm, click Delete.

http://securityresponse.symantec.com/avcenter/venc/data/w32.yaha.k@mm.html
Symantec information about this Worm

I shut it down through command prompt and then deletedit and then got rid of its backup files with the stinger.
And to respond to Brian, Norton realeased the Yaha virus definition on dec30, 6 days after the virus was released.
thx for all the help guys

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |