Removing thecoolpics.net worm
This W32/Sohanad is a worm. The worm will infect Windows systems and spreads through Instant Messaging. This worm propagates via Yahoo! Messenger, AOL Instant Messenger (AIM), Windows Live Messenger or Windows Messenger by sending an instant message to all the contacts of an active user. This message contains a link to a remote copy of itself. When the recipient clicks the link, a copy of this worm is downloaded and executed on the recipients’ system.
Common Instant Message an infected user sends are as follows:
- hot pics this week – http://thecoolpics.net/hot.jpg
- 1 of my vacation pictures – http://thecoolpics.net/vacation2.jpg
- Screenshot of new windows version _ Windows Vista – http://thecoolpics.net/vista.jpg so cool
- Images shot in Iraq _ The war will never end _ http://thecoolpics.net/Iraqwar.jpg
- oh my god , i’ve won a 20000 usd lottery – http://thecoolpics.net/mylottery.jpg
- never click into the links like something in this image – http://thecoolpics.net/dontclick.jpg
- the page cannot be displayed ” http://thecoolpics.net/error.jpg Something was wrong !!! Check it again and tell me later.
- My pics – http://thecoolpics.net/mypics.jpg
- Miss World 2006: – http://thecoolpics.net/MissWorld.jpg
- Do you realize who is in this image – http://thecoolpics.net/who.jpg . Just think for a moment and tell me soon
How to remove thecoolpics:
- Download this file W32Sohanad.vbs
- Reboot your computer in “SafeMode” and remain that no other programs are running.
- Double click on W32Sohanad.vbs.
This will solve your problem. Please note that this code will set your home page to this blog. If you want you can change it. K.
Keep visiting my blog
your suggested anti virus didnt act properly.
In fact it was of no use.
ohh. ohk ohk.. i will try it 2morw and gve u a solution..k
i have tried it.. but still the worm attacks my PC. is there any other way. one of your suggestion is to run regedit. but RUN command is disabled here. Thanks. pls email me here firstname.lastname@example.org
hey tht link is nt working to dnload file plz fix it or send me at email@example.com
my office firewall does’nt allow me to download the file.
can any1 send me the mail @
i wsnt able to download dat file….plss help me..
pls send me the vbs file because i can,t download it. My mail is firstname.lastname@example.org. And with this worm i have another problem, it don’t let me to acces the run im the start menu. Could i do anything?
please send the file to me at email@example.com
thats a 404, can you upload somewhere else ?
Hi sir my email is firstname.lastname@example.org please tell me how to remove thecoolpics.net worm. Please mail me on this address
i cant remove thecoolpics worm..
please help me…..
email me how to remove it..
i got this virus(thecoolpics.net) through ym. can anyone know how to remove it as the link which mentioned above is not working.