Removing the W32 Sohanad.H Virus/Worm Instructions


This is a worm that spreads itself by sending links to your contacts in messengers like Yahoo, AOL and Windows Live messengers. It disables Registry Editor and Task Manager. It changes the Internet Explorer (IE) home page and also modifies registry such that you cannot change the homepage address.
For more details on this worm, read the TrendMicro virus Information on this worm.

Here are simple steps following which you can get the worm removed from your system:

1) Download this file: http://avsharath.googlepages.com/DisableW32Sohanad.vbs
2) Double click on the downloaded file, it will execute to restore from the damage done to registry by the worm.
3) Restart your system.
4) Search for the file taskmng.exe and delete it if found.
5) Download Firefox, install it and make it your default browser to keep away from such virus attacks in future.

If this did not solve your problem, you might be infected with a variant of Sohanad worm, read the below articles:
Removing W32 Sohanad.B / W32.Sohanad.C / W32.Sohanad.A Instructions
If you have any questions, you can mail me to: avsharath(at)yahoo(dot)com
Hosted by www.Geocities.ws

1