Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: yt8a.exe virus?  (Read 19834 times)

0 Members and 1 Guest are viewing this topic.

btfanusa

    Topic Starter


    Greenhorn

    yt8a.exe virus?
    « on: October 21, 2008, 12:27:27 AM »
    Last night I turned on my computer and immediately after Windows XP started, my Spybot Search and Destroy warning popped up and warned me that a change has been made in the registry "C:/WINDOWS/system32/yt8a.exe". I clicked "Deny Change" but 5 seconds later, the same thing happened again so I denied it again and then again and again because it continued repeatedly. I ticked the box "Remember my decision" so now it automatically denies the spyware or virus or whatever that thing is. I can use my computer fine, but it is obviously very annoying because every 5 second something is trying to screw with my computer and my spybot would pop up the message "Change is on your black list and has been automatically denied" and I now always have like 4 or 5 spybot warning windows lined up on the right side of my screen! Does anyone know what this yt8a thing is and how do I get rid of it? Thank you so much in advance. 

    senthilvalli



      Intermediate

      Re: yt8a.exe virus?
      « Reply #1 on: October 21, 2008, 12:36:14 AM »
      this is virus problem.. so scan full system using kaspersky anti virus. :D

      btfanusa

        Topic Starter


        Greenhorn

        Re: yt8a.exe virus?
        « Reply #2 on: October 21, 2008, 12:41:30 AM »
        Ok...when I get home from work tonight, I will try to run that kaspersky anti virus program...

        senthilvalli



          Intermediate

          Re: yt8a.exe virus?
          « Reply #3 on: October 21, 2008, 12:42:47 AM »
          k fine..

          Carbon Dudeoxide

          • Global Moderator

          • Mastermind
          • Thanked: 169
            • Yes
            • Yes
            • Yes
          • Certifications: List
          • Experience: Guru
          • OS: Mac OS
          Re: yt8a.exe virus?
          « Reply #4 on: October 21, 2008, 12:43:06 AM »
          Senthilvalli, if a user comes here with a Virus/Malware problem, please direct them to this guide:
          http://www.computerhope.com/forum/index.php/topic,46313.0.html

          Btfanusa, please follow that Malware Removal guide.

          btfanusa

            Topic Starter


            Greenhorn

            Re: yt8a.exe virus?
            « Reply #5 on: October 21, 2008, 01:20:32 AM »
            Carbon Dude, actually I read that guide before but I was afraid to follow it, because it says I need to turn off the spybot first right? But in my case, the spybot is blocking the virus every 5 seconds, so if I turned it off, wouldn't the virus actually be able to get to my computer?! Thanks

            Carbon Dudeoxide

            • Global Moderator

            • Mastermind
            • Thanked: 169
              • Yes
              • Yes
              • Yes
            • Certifications: List
            • Experience: Guru
            • OS: Mac OS
            Re: yt8a.exe virus?
            « Reply #6 on: October 21, 2008, 01:35:21 AM »
            I would still do so. There must be source on the computer that is giving these warnings.

            btfanusa

              Topic Starter


              Greenhorn

              Re: yt8a.exe virus?
              « Reply #7 on: October 21, 2008, 01:59:14 AM »
              I am not sure if I am knowledgeable enough to handle this :-[

              If this virus turns out to be pretty nasty after I turn off the spybot then I am screwed because I don't know much about computers  :-\

              Carbon Dudeoxide

              • Global Moderator

              • Mastermind
              • Thanked: 169
                • Yes
                • Yes
                • Yes
              • Certifications: List
              • Experience: Guru
              • OS: Mac OS
              Re: yt8a.exe virus?
              « Reply #8 on: October 21, 2008, 02:48:19 AM »
              What exactly does Spybot say?

              CBMatt

              • Mod & Malware Specialist


              • Prodigy

              • Sad and lonely...and loving every minute of it.
              • Thanked: 167
                • Yes
              • Experience: Experienced
              • OS: Windows 7
              Re: yt8a.exe virus?
              « Reply #9 on: October 21, 2008, 05:50:07 PM »
              I understand your concerns, btfanusa.  If it will make you feel better, then just follow Step 6 for now, which is the HijackThis log.  You don't have to disable the Spybot TeaTimer for this part.  Just get the log posted and we'll take it from there, okay?
              Quote
              An undefined problem has an infinite number of solutions.
              —Robert A. Humphrey

              btfanusa

                Topic Starter


                Greenhorn

                Re: yt8a.exe virus?
                « Reply #10 on: October 25, 2008, 12:45:59 PM »
                Sorry for taking so long to reply but the problem has gotten WAY WORSE and my computer has been practically unusable.

                The original deal with the yt8a spybot thing disappeared on its own the day after I posted this. I never allowed the change with spybot, it just disappeared by itself. But then, the following new symptoms took over my computer instead:

                - my Norton sometimes says Bloodhound packed found, but since it is expired I don't think I can use it to kill the virus
                - when my windows starts, it says something like "Ordinal 11 (or 32 sometimes) not found in MAPI32.dll"
                - my computer has become SO SLOW it takes 5 seconds after I click something for it to register!
                - my computer fan is now always on! it's very loud and annoying and driving me nuts...
                - and you won't believe this...but whenever I come to my thread on the Computer Hope Forum, my IE brower will automatically quit! I finally solved this problem by opening a 2nd tab. With the 2nd tab opened, when I come to this thread, my IE will actually ask me "Sure you want to close all tabs?" so I have to keep choosing "Cancel". And this keeps happening repeatedly so you can imagine the *censored* I went through just to come here (but the good part is, the problem stops after I clicked Post Reply). It's like the computer knows I am asking for help and it's ****ing with me!!!

                Now attached is the Hijack this blog I made. THank you all so much for helping this computer idiot out.

                [Saving space - attachment deleted by admin]

                btfanusa

                  Topic Starter


                  Greenhorn

                  Re: yt8a.exe virus?
                  « Reply #11 on: October 25, 2008, 12:54:17 PM »
                  I swear there is like a freakin ghost. I just tried to click on every other thread here on Computer Hope Forum, and everything goes smoothly. THen when I click on my own thread, the IE keeps force closing me!! How is this possible?!?! This is the biggest mystery I have ever countered!!!!

                  BC_Programmer


                    Mastermind
                  • Typing is no substitute for thinking.
                  • Thanked: 1140
                    • Yes
                    • Yes
                    • BC-Programming.com
                  • Certifications: List
                  • Computer: Specs
                  • Experience: Beginner
                  • OS: Windows 11
                  Re: yt8a.exe virus?
                  « Reply #12 on: October 25, 2008, 12:58:01 PM »
                  it's probably the fact that the title has the word virus, and the virus installed a browser hijacker that will close the IE window when a page is loaded with certain words in the title- one of them being virus.


                  In any case- you should perform the malware steps from the beginning now.
                  I was trying to dereference Null Pointers before it was cool.

                  evilfantasy

                  • Malware Removal Specialist
                  • Moderator


                  • Genius
                  • Calm like a bomb
                  • Thanked: 493
                  • Experience: Experienced
                  • OS: Windows 11
                  Re: yt8a.exe virus?
                  « Reply #13 on: October 25, 2008, 02:05:59 PM »
                  You need to follow the guide step for step including disabling Tea Timer. It didn't do much good with it on so no need to worry about turning it off.

                  The PC is BADLY infected!

                  http://www.computerhope.com/forum/index.php/topic,46313.0.html

                  CBMatt

                  • Mod & Malware Specialist


                  • Prodigy

                  • Sad and lonely...and loving every minute of it.
                  • Thanked: 167
                    • Yes
                  • Experience: Experienced
                  • OS: Windows 7
                  Re: yt8a.exe virus?
                  « Reply #14 on: October 26, 2008, 03:07:47 AM »
                  Sheesh, no kidding!  btfanusa, please do as evilfantasy has instructed.  Like he said, you are badly infected, and we're gonna have to do some heavy-duty cleaning on your machine.
                  Quote
                  An undefined problem has an infinite number of solutions.
                  —Robert A. Humphrey