How to remove the nhatquanglan.xlphp.net virus?

Question

For those who do not know this virus and do not want to get infected.. DO NOT EVER GO TO THAT LINK

Anyway, my friend accidentally clicked the link to the site and now her yahoo messenger is starting to have weird status lines and her ym is also starting to automatically send ims with that link. How could she resolve it? Will Antivirus software remove it once detected? or is there a program that she could download to remove it?

Answer 1

If you use Internet Explorer.

Disable install on demand.

Disable third party browser extension.

Disable the activex plugin that for instant message

Raise security to high

Install spybot

Spybot is a free anti-spyware tool that that contains many features to

immunize your computer against some spyware.

http://www.safer-networking.org/

It modifies Internet Explorer to block a lot of the bad stuff known to Spybot.

There is a second layer of protection for IE that blocks anything that should come through by different aspects.

Spybot Resident a tool which check permanently running application to protect your system.

Spybot Resident TeaTimer is a tool which perpetually monitors the processes called/initiated and immediately detects known malicious processes.

It giving you some options how to deal with this process in the future:

You can set TeaTimer to be informed when the process tries to start again automatically kill the process or generally allow the process to run

There is also an option to delete the file associated with this process.

In addition, TeaTimer detects, when something wants to change some critical registry keys. TeaTimer can protect you against such changes again giving you an option: You can either Allow or Deny the change.

Spybot host file locking is a tool which locks the hosts file to prevent unauthorized changes.

Locking the hosts file will prevent most hosts hijackers (even unknown) from doing harm;

Locking the IE settings will prevent other users of your computer to change your preferences.

Spybot ActiveX is a tool to display a list of installed ActiveX applications it will display a green checkmark in front of ActiveX applications known as legitimate,

and a red sign in front if applications known as illegitimate

Spybot process list is a tool displays a list of all currently running processes,

including some information about them. It also allows you to kill some processes

Spybot System startup tool lists all programs that are started at Windows startup.

If those items are in the database coming with Spybot, it will display some more information about them.

It also allows you to disable (and enable) items, as well as delete them, change them or insert new items.

Spybot system internal is a registry cleaner that fix error in windows registry.

Answer 2

Download the free version of Superantispyware.  Finds viruses and spyware without any conflict to your own antivirus software.  http://www.superantispyware.com  Update and run and in depth scan.  Free you must update daily on a manaul basis or purchase and get auto. updates.

Mind Doctor, France