Removing the W32.Sonahad.B worm (Yahoo Instant Messenger worm)

December 25, 2006 · Filed Under Miscellaneous tips, Web

After reading through various forums on the Internet, I have found out that many have been infected by the W32.Sonahad.B worm. This particular worm spreads by automatically sending http links to all the contacts in your Yahoo Messenger, and if your buddy clicks on it, they get infected as well.

If your computer is infected by this worm, you wouldn’t be able to run the Registry Editor and Task Manager. It would also change the Internet Explorer (IE) home page and also modifies registry such that you cannot change the homepage address.

Now, this particular website has the instructions on how to remove the Sonahad.B worm. You’ll be needing to download a particular vbs file to remove the invalid registry entries that the worm has done to your computer.

As always, to prevent these kinds of problems, keep your antivirus updated and always be cautious of clicking links, especially if they appear to be randomly generated.

Share and Enjoy: