Forum Home
Press F1
 
Thread ID: 23408 2002-08-15 11:58:00 I-Worm/Yaha.F virus flyingsolo (1512) Press F1
Post ID Timestamp Content User
71305 2002-08-15 11:58:00 I downloaded AVG virus scanner which found and healed (?) the following virus: I-Worm/Yaha.F

The file name moved to the vault is: C:\RECYCLED\ELIE.EXE

However since then I have been unable to run any applications. I get the following message:

Windows cannot find elie".exe.

This program is needed for opening files of type 'Application'.

Location of elie".exe:


If anyone can help - I would be very grateful
flyingsolo (1512)
71306 2002-08-15 12:12:00 At a rough guess I would say that the virus has changed the . exe fyletype to open with itself .

Maybe you could go into tools -> folder options -> file types and edit the Application or . exe file type and remove any reference to that nasty file .
SoniKalien (792)
71307 2002-08-15 12:19:00 I am unfamiliar with the elia file that was healed by AVG.

I would be inclined to run the Nortons or Housecall online scanner to see if there is any further damage to your computer....... I had a dickens of a job to eradicate Yaha from my puter, and ended up re-formatting.

BALDY
Baldy (26)
71308 2002-08-15 12:24:00 A removal tool is available from the Norton site:
securityresponse.symantec.com
Heather P (163)
71309 2002-08-15 15:44:00 Deleting the Yaha Virus before repairing the damage it does to the registry will cause your .exe files to stop working. Try the removal tool as in the post above and if that doesn't work then you will have to follow the removal instructions in here (securityresponse.symantec.com) and repair the damage manually. dipstick01 (445)
71310 2002-08-21 11:24:00 Thank you to all those who replied to my problem.

For the benefit of anyone else who may have this problem the solution that worked for me was as suggested in the third post by Heather P.

By running the removal tool from the Norton site I was able to eradicate the virus and successfully start programs again.

Thanks again for you assistance.
flyingsolo (1512)
1