<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments on: nhatquanglan Virus</title>
	<atom:link href="http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/feed/" rel="self" type="application/rss+xml" />
	<link>http://piyushlabs.wordpress.com</link>
	<description>My small lab in this big world . . .</description>
	<lastBuildDate>Sat, 07 Nov 2009 10:14:42 +0000</lastBuildDate>
	<generator>http://wordpress.com/</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Vineet</title>
		<link>http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/comment-page-8/#comment-2444</link>
		<dc:creator>Vineet</dc:creator>
		<pubDate>Thu, 11 Dec 2008 17:03:49 +0000</pubDate>
		<guid isPermaLink="false">http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/#comment-2444</guid>
		<description>Thanks Man.. your tools worked.. !!</description>
		<content:encoded><![CDATA[<p>Thanks Man.. your tools worked.. !!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Egyptian</title>
		<link>http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/comment-page-8/#comment-2336</link>
		<dc:creator>Egyptian</dc:creator>
		<pubDate>Sat, 22 Nov 2008 08:00:35 +0000</pubDate>
		<guid isPermaLink="false">http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/#comment-2336</guid>
		<description>Thank you!</description>
		<content:encoded><![CDATA[<p>Thank you!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dupsyn</title>
		<link>http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/comment-page-8/#comment-2096</link>
		<dc:creator>Dupsyn</dc:creator>
		<pubDate>Tue, 30 Sep 2008 18:45:18 +0000</pubDate>
		<guid isPermaLink="false">http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/#comment-2096</guid>
		<description>I have this virus on my yahoo messenger, it suddenly appears, shows some things and dissapear and then send rubbish messages like (Loi em noi cho tinh chung ta, nhu doan cuoi trong cuon phim buon. Nguoi da den nhu la giac mo roi ra di cho anh bat ngo... http://nhatquanglan.xlphp.net/ ) to everyone on my messenger list and then change my online status from &quot;available&quot; to &quot;Loi em noi cho tinh chung ta, nhu doan cuoi trong cuon phim buon. Nguoi da den nhu la giac mo roi ra di cho anh bat ngo... http://nhatquanglan.xlphp.net/ &quot; sometimes it also minimizes whatever i&#039;m doing at the moment.

This is really disgusting, don&#039;t know what to  about this.

Please help me.</description>
		<content:encoded><![CDATA[<p>I have this virus on my yahoo messenger, it suddenly appears, shows some things and dissapear and then send rubbish messages like (Loi em noi cho tinh chung ta, nhu doan cuoi trong cuon phim buon. Nguoi da den nhu la giac mo roi ra di cho anh bat ngo&#8230; <a href="http://nhatquanglan.xlphp.net/" rel="nofollow">http://nhatquanglan.xlphp.net/</a> ) to everyone on my messenger list and then change my online status from &#8220;available&#8221; to &#8220;Loi em noi cho tinh chung ta, nhu doan cuoi trong cuon phim buon. Nguoi da den nhu la giac mo roi ra di cho anh bat ngo&#8230; <a href="http://nhatquanglan.xlphp.net/" rel="nofollow">http://nhatquanglan.xlphp.net/</a> &#8221; sometimes it also minimizes whatever i&#8217;m doing at the moment.</p>
<p>This is really disgusting, don&#8217;t know what to  about this.</p>
<p>Please help me.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Muhammad Hassaan</title>
		<link>http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/comment-page-8/#comment-1906</link>
		<dc:creator>Muhammad Hassaan</dc:creator>
		<pubDate>Sat, 23 Aug 2008 05:14:11 +0000</pubDate>
		<guid isPermaLink="false">http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/#comment-1906</guid>
		<description>when i open any drive in windows xp system Pemtium 4, a dialog box opens and it gives a debug option. how i remove the debugging option and why is it comes?</description>
		<content:encoded><![CDATA[<p>when i open any drive in windows xp system Pemtium 4, a dialog box opens and it gives a debug option. how i remove the debugging option and why is it comes?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: m0nciar</title>
		<link>http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/comment-page-7/#comment-1899</link>
		<dc:creator>m0nciar</dc:creator>
		<pubDate>Wed, 20 Aug 2008 01:51:23 +0000</pubDate>
		<guid isPermaLink="false">http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/#comment-1899</guid>
		<description>i still cant remove the nhatquanlan virus, i followed the steps though...
i cant find some folders or .exe to delete...

but thanks for the info, i used SpyBot SD to block registry changes and execution of application...

i still need some help, can u email me a very step to step process to remove it?

monciarrosima@yahoo.com</description>
		<content:encoded><![CDATA[<p>i still cant remove the nhatquanlan virus, i followed the steps though&#8230;<br />
i cant find some folders or .exe to delete&#8230;</p>
<p>but thanks for the info, i used SpyBot SD to block registry changes and execution of application&#8230;</p>
<p>i still need some help, can u email me a very step to step process to remove it?</p>
<p><a href="mailto:monciarrosima@yahoo.com">monciarrosima@yahoo.com</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Radhika</title>
		<link>http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/comment-page-7/#comment-1854</link>
		<dc:creator>Radhika</dc:creator>
		<pubDate>Tue, 05 Aug 2008 11:52:10 +0000</pubDate>
		<guid isPermaLink="false">http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/#comment-1854</guid>
		<description>hey Piyush,
I have problem with my yahoo messenger....some weird sites gets automatically forwarded and hinhem.src also gets automatically forwarded in chat window............whichever syptoms u have stated...all r there with my P.C.......but I dont know how  to tackle it......m not really computer wizard....have tried the steps above but doesnt work!!!!!!!!!</description>
		<content:encoded><![CDATA[<p>hey Piyush,<br />
I have problem with my yahoo messenger&#8230;.some weird sites gets automatically forwarded and hinhem.src also gets automatically forwarded in chat window&#8230;&#8230;&#8230;&#8230;whichever syptoms u have stated&#8230;all r there with my P.C&#8230;&#8230;.but I dont know how  to tackle it&#8230;&#8230;m not really computer wizard&#8230;.have tried the steps above but doesnt work!!!!!!!!!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: piyushlabs</title>
		<link>http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/comment-page-7/#comment-1784</link>
		<dc:creator>piyushlabs</dc:creator>
		<pubDate>Tue, 22 Jul 2008 11:09:05 +0000</pubDate>
		<guid isPermaLink="false">http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/#comment-1784</guid>
		<description>follow manual steps for self troubleshooting at
http://piyushlabs.wordpress.com/self-troubleshooting-manual-steps-to-kick-out-any-virus/

PRABHAKAR
use Autoruns.exe form sysinternals.com

ABDUL
u will loose some virus files

SOM
follow manual steps for self troubleshooting at
http://piyushlabs.wordpress.com/self-troubleshooting-manual-steps-to-kick-out-any-virus/

KALPIT
search for files *.exe with file size accordingly

NIRAJ
please use Heal_nhatquanglan or
follow manual steps for self troubleshooting at
http://piyushlabs.wordpress.com/self-troubleshooting-manual-steps-to-kick-out-any-virus/</description>
		<content:encoded><![CDATA[<p>follow manual steps for self troubleshooting at<br />
<a href="http://piyushlabs.wordpress.com/self-troubleshooting-manual-steps-to-kick-out-any-virus/" rel="nofollow">http://piyushlabs.wordpress.com/self-troubleshooting-manual-steps-to-kick-out-any-virus/</a></p>
<p>PRABHAKAR<br />
use Autoruns.exe form sysinternals.com</p>
<p>ABDUL<br />
u will loose some virus files</p>
<p>SOM<br />
follow manual steps for self troubleshooting at<br />
<a href="http://piyushlabs.wordpress.com/self-troubleshooting-manual-steps-to-kick-out-any-virus/" rel="nofollow">http://piyushlabs.wordpress.com/self-troubleshooting-manual-steps-to-kick-out-any-virus/</a></p>
<p>KALPIT<br />
search for files *.exe with file size accordingly</p>
<p>NIRAJ<br />
please use Heal_nhatquanglan or<br />
follow manual steps for self troubleshooting at<br />
<a href="http://piyushlabs.wordpress.com/self-troubleshooting-manual-steps-to-kick-out-any-virus/" rel="nofollow">http://piyushlabs.wordpress.com/self-troubleshooting-manual-steps-to-kick-out-any-virus/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: niraj</title>
		<link>http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/comment-page-7/#comment-1776</link>
		<dc:creator>niraj</dc:creator>
		<pubDate>Mon, 21 Jul 2008 16:47:40 +0000</pubDate>
		<guid isPermaLink="false">http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/#comment-1776</guid>
		<description>am suffer problem the virus named C:\WINDOWS\hinhem.scr
. My yahoo messanger is infected and sent msg automattically to all senders.please help me.
C:\WINDOWS\hinhem.scr</description>
		<content:encoded><![CDATA[<p>am suffer problem the virus named C:\WINDOWS\hinhem.scr<br />
. My yahoo messanger is infected and sent msg automattically to all senders.please help me.<br />
C:\WINDOWS\hinhem.scr</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kalpit</title>
		<link>http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/comment-page-7/#comment-1754</link>
		<dc:creator>Kalpit</dc:creator>
		<pubDate>Thu, 17 Jul 2008 14:47:11 +0000</pubDate>
		<guid isPermaLink="false">http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/#comment-1754</guid>
		<description>Hi,

I used the &#039;Heal&quot; provided on your website but don&#039;t know whether the virus is gone or not. The folders still have the sub-folders with same names.

Please help.</description>
		<content:encoded><![CDATA[<p>Hi,</p>
<p>I used the &#8216;Heal&#8221; provided on your website but don&#8217;t know whether the virus is gone or not. The folders still have the sub-folders with same names.</p>
<p>Please help.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Somsubhro</title>
		<link>http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/comment-page-7/#comment-1722</link>
		<dc:creator>Somsubhro</dc:creator>
		<pubDate>Thu, 10 Jul 2008 11:35:33 +0000</pubDate>
		<guid isPermaLink="false">http://piyushlabs.wordpress.com/nhatquanglan-new-folder-svchost/#comment-1722</guid>
		<description>I have the same Newvirusremoval.vbs problem. I suppose thats in addition to the XPC infosystems error. Prakhar, are you facing the XPC infosystems problem as well?</description>
		<content:encoded><![CDATA[<p>I have the same Newvirusremoval.vbs problem. I suppose thats in addition to the XPC infosystems error. Prakhar, are you facing the XPC infosystems problem as well?</p>
]]></content:encoded>
	</item>
</channel>
</rss>
