"Frank" <(E-Mail Removed)> wrote:
>sorry, I din't mention those .exes are from C:\program
>files\WINNIT\system 32. appart from gainning some space,
>some programs in the system32 folder have always started
>to run since the computer is on and that really slow down
>my other applications, so I have deleted several of them
>before just to stop them from running. their icons are
>like heart shaped which is the same as my screensavers'.
>one of them is still in the folder, named winservices.exe
winservices.exe is not a screensaver. It is a file of the Yaha virus
http://(E-Mail Removed)
Yaha changes the registry so that when you double click on a .exe
file, the virus is launched first, then the intended file. If the
corresponding virus file is deleted, you'll get an error message about
file not found (the virus file, that is) though it may appear to the
user that it is the file of the double-clicked icon that was not
found.
See above link for removal. You'll want to do a virus scan with the
latest definition files. If one could survive undetected there may be
others.
Good luck
Roger