Remove UST virus/ Funny scandle virus/autorun virus

 

UST virus is a dangerous virus. It's also called as Funny scandle virus coz file name is Funny UST Scandal. avi.exe . This is actually a worm. It spread through Yahoo Messenger exploits.

This is a dangerous virus as it turns off the most antivirus upon instalation. Later it download different malware programs from Internet and install it without your knowledge. Funny UST Scandal.exe may infect network computers, through network shares and infected messages, Yahoo messenger and stop all running process.

How to remove the virus
Just download this tool
UST VIRUS REMOVER (not tested)

If this doesnot work do it manually

  1. Download Task killer as your Task manager will not work.

  2. Now run taskiller and terminate the following process killer.exe , lsass.exe , smss.exe or any other process that has the same icon of virus

  3. Now go to command prompt(START>>>RUN>>>Now type CMD)

  4. Now type the following commands one after the another

    • cd\

    • attrib -h -s smss.exe

    • attrib -h -s autorun.inf

    • start c: (a new window will open)

  5. select smss.exe, autorun.inf, Funny UST Scandal.avi.exe and delete it

  6. If there are more than one partition then follow the above 3 steps 6, 7, 8 just replace " start c:" with your drive letter like start d:

  7. Now in the command prompt type the following

    • cd windows

    • attrib -h -s smss.exe

    • start c:\windows

  8. Now Delete the file smss.exe

  9. Goto c:\documents and settings\all users\startmenu\programs\startup abd delete lsass.exe

  10. Click Goto regedit(START>>>RUN>>>Now type REGEDIT)

  11. Delete the registry entries

    • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL

CheckedValue 0

o        HKCU\Software\Microsoft\Windows\CurrentVersion\Run

Runonce Windows>\smss.exe


Select the "Virus solution" label(below) to know more about rescuing your comp from other virus