A couple of days ago, a new threat has emerged to a lot of MSN users, the “hi. this is your photo?” Virus. Like other virus it enters your system like a trojan horse. It gains your trust and then tricking you to install something in your computer without your knowledge. Before you knew it, your credit card and all other personal information has been stolen!
What does this “hi. this is your photo?” Virus do?
Well, honestly I don’t know. What I do know is it runs the following files (below) on the background of your computer. You must stop these file through task manager.
- svlost.exe
- svlostSrv.exe
- tasman.exe
It also installs the “svlostServices” service on your computer and automatically runs it on startup. To delete this service run the command below using the run dialog box (start menu -> run).
- sc delete svlostServices
It also adds the following files into your %systemroot%/system32/ folder. Delete these files Immediately.
- libeay32.dll
- ssleay32.dll
- svlost.exe
- svlosta.dll
- svlostb.dll
- svlostSrv.exe
- tasman.exe
And to complete the removal run the command below using the run dialog box (start menu -> run) to delete some registry entries this trojan horse has created.
- reg delete “hkcu\software\microsoft\internet explorer\main” /v default_page_url /f
- reg delete “hkcu\software\microsoft\internet explorer\main” /v “Start Page” /f
You just removed the “hi. this is your photo?” virus from your computer. If the solution above did not resolve your problem, checkout the links below for other resources. Good Luck!
Related Information:
