Question: Does anyone know how to get rid of the HOTVN.US Virus that is spreading thru Yahoo IM? Is Yahoo doing somethin It spreads thru Yahoo IM. It came to me from a friend on IM and trusting my friend I opened it and then it automatically went out to everyone on my list in an IM from me. It attaches itself to your IM and constantly sends messages out to others and if they open the url it just keeps spreading. It also attacks your web browser home and pretty much takes over and your browser is HOTVN. US Hot Hot Hot. I also can't get into task manager now. It says it's been disables by my administrator. The ability to change my browser home back to Yahoo in internet options is also disabled. Anyone have any info on this. SpyBot did not fix it. AVG did not fix it. CWShredder did not fix it. Any help would be much appreciated.

Answer: It has to be removed manually.\nSo how to remove this manually from your computer ?\n\n1: Close the IE browser. Log out messenger / Remove Internet Cable.\n\n2: To enable Regedit\n\nClick Start, Run and type this command exactly as given below: (better - Copy and paste)\n\nREG add HKCU&#92;Software&#92;Microsoft&#92;Windows&#92;CurrentVersion&#92;Policies&#92;System /v DisableRegistryTools /t REG_DWORD /d 0 /f\n\n3: To enable task manager : (To kill the process we need to enable task manager)\n\nClick Start, Run and type this command exactly as given below: (better - Copy and paste)\n\nREG add HKCU&#92;Software&#92;Microsoft&#92;Windows&#92;CurrentVersion&#92;Policies&#92;System /v DisableTaskMgr /t REG_DWORD /d 0 /f\n\n4: Now we need to change the default page of IE though regedit.\n\nStart>Run>Regedit\n\nFrom the below locations in Regedit chage your default home page to google.com or other.\n\nHKEY_CURRENT_USER&#92;SOFTWARE&#92;Microsoft&#92;Internet Explorer&#92;Main\n\nHKEY_ LOCAL_MACHINE&#92;SOFTWARE&#92;Microsoft&#92;Internet Explorer&#92;Main\n\nHKEY_USERS&#92;Default&#92;Software&#92;Microsoft&#92;Internet Explorer&#92;Main\n\nJust replace the attacker site with google.com or set it to blank page.\n\n5: Now we need to kill the process from back end. Press Ctrl + Alt + Del\n\nKill the process svhost32.exe . ( may be more than one process is running.. check properly)\n\n6: Delete svhost32.exe , svhost.exe files from Windows/ & temp/ directories. Or just search for svhost in your comp.. delete those files.\n\n7: Go to regedit search for svhost and delete all the results you get.\n\nStart menu > Run > Regedit >\n\n8: Restart the computer. That’s it now you are virus free.
This question from the Yahoo Q&A forum is categorized in the topic: Sports