W32/Sohana-W
W32/Sohana-W also known as Yahlover is a instant messengers worm that can drop compressed mischievous files onto and change registry values on the infected computer. The W32/Sohana-W generally spread via chat programs, annoying SPAM emails and corrupt porn content web sites.
Sohana worm injects itself in low level system processes to hide from securiy programs and installs harmful sscvihost.exe, blastclnnn.exe, sscvihost.exe files on the infected pc. W32/Sohana-W is a serious security risk that can radically slow down memory and computer performance.
Clone threats: W32/YahLover.worm.gen, W32.Imaut.N, W32/Sohana.W, W32/Sohana.W@IM, WORM_SOHANAD.EK, IM-Worm.Win32.Sohanad.ap, Worm:Win32/Autorun!inf, Worm:Win32/Sohanad.I, Generic!atr, W32/Sohana-W
W32/Sohana-W worm indications:
- Dropped system start-up, re boot performance and unusual Windows breakdowns
- Search results and browser startpage redirected to strange sites
- Missing dlls, registry keys and Windows files resulting in "Blue Screen Of Death" error
- Abnormal running W32/Sohana-W program files in the task manager, irritating tower speaker bleeps
- W32/Sohana-W is a memory resident software, especially complicated to remove manually
- Sexually explicit bulk pornographic popups even with active pop-up blocker software
- Screen saver settings and Windows desktop wallpaper modify by themselves
Common W32/Sohana-W worm actions:
- Watches registry records, Windows activity, captures surfing history to create equivalent pop-ups
- Use Windows security holes to download dangerous third-party files bundled with harmful malware
- Sohana-W tracks and deactivate firewall and antivirus programs and forwarsd personal info such as usernames, passwords to outlying servers
Run Free state-of-the-art scanner to determine if you are hijacked. Uninstall W32/Sohana-W and all its variants for good! |
|
