- 1). Navigate your web browser to the AVG Free Anti-Virus website (see Resources). Click on the download link if you don't have an anti-virus utility already installed on your computer. Open the installation file and follow the on-screen prompts.
- 2). Access the Start menu at the lower-left corner of the screen. Click on the "Control Panel" button and then click on the "System" icon.
- 3
Opening the System Protection Menu
Click on the "System Protection" link underneath the "Tasks" heading at the upper-left corner of the window. Scroll down to the bottom of the window and locate the "Automatic System Restore" heading. - 4
Removing the System Restore Check Marks
Remove the check mark from each of the check boxes underneath the "Automatic System Restore" heading. Click on "OK" and then close the "System Protection" window. - 5
Updating the Virus Information
Open your computer's anti-virus program. Download the program's most recent virus scan information by clicking on the "Update Now" button at the left side of the window. - 6). Click on the "Computer Scanner" icon and wait for the anti-virus program to finish scanning your hard drive for the W32 Blastclan worm. Choose the option labeled as "Remove Problems" when the worm is found by the virus scan.
- 7
Accessing the Registry Editor
Go back to the Start menu and then access the Search option. Type "Regedit" into the search box and then press Enter. Double-click the icon that shows up in the results. - 8
The Registry Editor Window
Go through the folders in the registry editor until you reach the folder named "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\." Locate the registry entry at the right-hand side of the window named "Yahoo Messengger" = System\scvvhsot.exe." Right-click the entry and then choose "Delete." - 9). Navigate to the folder named "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon." Right-click on the entry named "Shell = Explorer.exe SCVVHSOT.exe" and then delete it to finish removing the W32 Blastclan worm from your computer.
previous post