Funny UST scandal virus

its easy to fix all problems smss.exe is a running program easy to fix kill its 1rst and then delete in the registry and if service is not available u can find hijack install it funny scandal is also easy to fix just run kyuzo remover and thats it..............more qouestion just its alan from ormoc city

thnx i love u guys u have solved my funny scandal problem thxxxx

I found this Funny UST scandal remover.
I tried and worked fine. It removed killer.exe, smss.exe, lsass.exe and xmss.exe

http://www.geocities.com/six519/Remover.zip

1>boot into safe mode
2>End the killer.exe process from the task manager
3>go to start->run
type attrib -s -h C:\windows\*.* press enter
go to the windows folder and create two files by name smss.exe and killer.exe
type attrib-s -h d:\*.* and so on for all drives
4>After typing for a particular drive..go to that drive and create these files..i.e smss.exe and killer.exe
IMPORTANT--do not double click to open the drives..
instead type the drive name in the address bar and navigate..
5>Restart your computer
6>that's all

i want the solution of that virus

I used all above, but can't sole probelm.

This guy has given the Perfect Solution

http://www.edmartechguide.com/2007/11/funny-ust-scandal-aviexe-remover.html

run taskiller and left click it on the system tray(the one with a skull icon)

-click processes

-to close the virus, select process and click yes to the question

(process to close)
1.killer.exe
2.lsass.exe
3.smss.exe

note: close only file that have the same icon of Funny UST Scandal.avi.exe


CMD STEPS
1-now, click "start" then "run"
2-type "cmd" without quotes
3-type "cd\" without quotes
4-type "attrib -h -s smss.exe" without quotes
5-type "attrib -h -s autorun.inf" without quotes
6-type "start c:" without quotes(a new window will open)
7-select smss.exe,autorun.inf,Funny UST Scandal.avi.exe and delete it

-if theres any drive or a partition type "d:" in command prompt without quotes
"d" is the drive letter then repeat the CMD STEPS number 4-7 above.......

-now type this on the command prompt "cd windows" without quotes(na naman!)
-type "attrib -h -s smss.exe" without quotes(uli)
-type "start c:\windows" without quotes(hay naku!)
-delete the file smss.exe
-now, goto c:\documents and settings\all users\startmenu\programs\startup
-delete lsass.exe

-click "start" then "run"
-type "regedit" without quotes then delete the registry entries above....

-thats all!!!!!! MABUHAY ANG LIPA(6519)

question??? email me at: six519@yahoo.com

Note:
Magtatagalog na ako.. hirap na akong mag english......
Kapag nagkaproblema kau sa pagoopen ng drives sa mycomputer open
nyo lang uli ang regedit tpos find nyo lang ang "smss.exe"
tpos burahin nyo ung mga value na katulad nito--->>"c:\smss.exe","d:\smss.exe" etc.....
ok?????

• 1 week ago

100% 1 Vote

• Report It

Is this what you are searching for?

• Rating: Good Answer
• Rating: Bad Answer

i would sugess a very small av utility "Smart antiviru" which remove funny ust scandal, smms, autorun.inf and also new folder.exe.. this also contain an option for USB flash drive to be cleaned.
just serach the download URL on google and download it.

Jan 6th I Killed The Funny UST Scandal Virus Files under Computers | Posted by firewalker I got this virus about a month ago when suddenly my colleagues plugged in his USB flashdisk into my laptop. It was like "Argh" moment of despair and anger. But this helps me to solve the problem eventually. My friend, Fandi, used to chat around about computers and viruses. He used to breed some, too (keeping virus in his local harddisk, ZIP it, and show it to his friends). It's not that he wants to harm everybody, but to share his knowledge about the virus. The same way I'm doing this to you now.

Here is the summary I got from TechPinoy Online:
General Overview: Software used to build the virus= AutoIt V3
drop Files- killer.exe(4084 kb) in c:\windows\
lsass.exe(3920kb) in c:\documents and settings\all users\start menu\programs\startup
smss.exe(4088kb) in all root drives and in c:\windows
autorun.inf(1kb) in all root drives with a script
Autorun Command: [autorun]
open=smss.exe
shell\Open\Command=smss.exe
shell\open\Default=1
shell\Explore\Command=smss.exe
shell\Autoplay\command=smss.exe
The Symptoms: Creating hidden file of Funny UST Scandal.avi.exe(228kb) in all root drives
Disabling "Show Hidden File" and "Show System File" in Folder Option
Immediately closing down every Folder Option and Regedit windows opened (Disabling you from changing it)

How to Kill it? If you are already got the symptoms, you can either follow my steps or just download the 1 type virus removal from PinoyTech.
The point of this steps is to disable the task already run in Task Manager and recover your registry regarding Folder Option items.

There are two alternatives, you can either download task killer from http://www.rsdsoft.com/task_killer/index.php4 or download processxp from http://mihd.net/obmd26 (Highlight the URI and copy it to your address bar)
For Task killer:

run taskiller and left click it on the system tray(the one with a skull icon)

click processes

to close the virus, select process and click yes to the question

(process to close)

1. killer.exe
2. lsass.exe (careful with this, this is also valid Microsoft process)
3. smss.exe (in my case it was xmss.exe, also careful with this)

Note: close only file that have the same icon of Funny UST Scandal.avi.exe
For ProcessXP:

Run ProcessXP

It will run as a replacement of your Task Manager, which will be closed by the virus immediately. But fear not, it won't closed, but it will be minimized to your system tray icons.

Quickly search for the "alien" process and press Del to kill it. In my case, I only delete the xmss.exe, and it's gone! The virus will not be active anymore, unless you accidentally double click it.
This is how the icon looks like (it's a masterpiece of an icon, but dangerous!):


The steps doesn't end here, you still need to remove the funnyustscandal.avi.exe file from any hard disk drives directory that you have (only the hard disk directory, not deeper than that).
Another Two Alternatives: Since you can't view the file (it was hidden by the registry entry made by the virus), you must clear the registry first:
Download ANSAV antivirus from this link.

Run the antivirus, select the Registry FX plugin by Eko Sugiarto. Check the "Show Hidden File", "Enable Folder Option", and "Show File Extension". Click Restart Explorer. Then You can see those hidden files.

Delete the funnyustscandal.avi.exe from every drives directory (including your removable disks)

Other way, with Command Prompt (from TechPinoy Online):
1-now, click "start" then "run"
2-type "cmd" without quotes
3-type "cd\" without quotes
4-type "attrib -h -s smss.exe" without quotes
5-type "attrib -h -s autorun.inf" without quotes
6-type "start c:" without quotes(a new window will open)
7-select smss.exe,autorun.inf,Funny UST Scandal.avi.exe and delete it
If theres any drive or a partition type "d:" in command prompt without quotes
"d" is the drive letter then repeat the CMD STEPS number 4-7 above…….

• now type this on the command prompt "cd windows" without quotes
• type "attrib -h -s smss.exe" without quotes
• type "start c:\windows" without quotes
• delete the file smss.exe
• now, goto c:\documents and settings\all users\startmenu\programs\startup
• delete lsass.exe

Final steps Destroy these registry entries by running REGEDIT from start menu, "run", then type "regedit" and enter:

<code>HKEY_LOCALMACHINE<WBR>\Software\Microsoft\WindowNT<WBR>\CurrentVersion\Winlogon=shell(killer.exe)<br /> HKEY_CURRENT_USER\Software<WBR>\Microsoft\windows\Currentversi<WBR>on\Run=runonce(c:\windows\smss<WBR>.exe)</code>

This is how ProcessXP looks like:


Don't let such a virus disturbs you and don't rely on antivirus too much. Read this article for more information (in Indonesian):

• 5 Alasan Untuk Tidak Sepenuh Hati Percaya Antivirus
• Funny UST Scandal Avi.Exe Remover
• Generic problem for all Operating Systems Funny UST scandal virus

Update (January 26th, 2008):
I just try out a remover tool by ghigz (you can see his/her comment down below) and found out that it can remove the funny ust scandal automatically. But still, it doesn't throughly search your PC for the source. For this experiment I run the virus in my PC from a compressed zip file. It's true that the virus had vanished, but the registry wasn't fully fixed and the source file were not deleted. Yet I tried again those steps above to manually remove the virus permanently.
However, I recommend this remover tool for you to download from ghigz's link or mine. All you need to do is:
1. run the remover tool,
2. fix the registry, and
3. search for funny ust scandal.exe or xmss.exe or smss.exe in every hard drive directory

http://www.4shared.com/file/30402575/d70dafa8/Remover.html
just download and run the file problem will be solve

I solved Funny UST scandal virus problem without any Antivirus. If any body wants to solved this problem they can contract with me. My Contract Number: +8801911411686.

Hey Guys....this link worked for me ;)
http://greatissoftware.com/regrunplat.zip

Hello ppl,


Simply install PCTOOLS ANTI-VIRUS to Scan , Remove and then filter your internet for such threats... It's FREE... includes free updates too....



Easy.. XD

Reinstall the operating system and as soon as u reistall ur operating system first thing you need to do is install a genuin anti virus. I suggest avg free or avira premium.And as soon as u will do the first scan it will delete this virus. And ... trust me.. it worked on 4 of my systems. I bought avira anti virus which deleted this virus.

I could able to solve this problem with Regrun security suite. It is a great tool with different types of security utilities. You can download the 30 day trial version from this site to remove the viruses.
http://greatissoftware.com/regrunplat.zip

But one thing you need to scan your system 3/ 4 times to completely get rid of the virus. It used to scan & clean the PC when booting, so the virus can not activate. It is less user friendly but has many features to control over you system.

After completing removal with Regrun, do an update on your Antivirus program such as Norton, AVG, Sophos, etc. And do a deep scan on all drives.

Only Sophos identified this risk clearly, refer
http://www.sophos.com/virusinfo/analyses/w32imauta.html

thnx alot for this link
its very useful it remved it in a few seconds

Remove Funny Scandal without any antivirus

Remove completely funny ust scandal avi.exe(virus) from your hard disk without using any antivirus and just installing fresh copy of window. This is done by jitender kumar.
For any problem regarding viruses contact me on my e mail id

E-mail ID: jka.cool@gmail.com
jka_cool@yahoo.co.in

Jitender kumar
MCA (master of computet applications) (student of software engineering)
MIET Engineering college, Meerut
UP, INDIA

Funny ust scandal.avi.exe run thses files :
1.Funny.exe
2.Killer.exe
3.Smss.exe or xmss.exe
If your computer corrupted with funny with xmss.exe then you :

1.can’t open Command prompt by run cmd command
2.can’t install most of softwares
3.can’t open task manager
4. can’t restore your system
5.can’t open folder options
6.can’t see hidden files and folders

And if funny with smss.exe then you are in some better condition . ok now apply this steps and give me reply and your experience on my e mail id and you can be my friend. Ok best of luck
so for removing this virus you must install windows at one time and following these steps you will remove this virus.

1. install a fresh copy of window by formatting any drive.

2. do not open any drive(after installation of window) before removing virus from your system.

3. make a restore point

4.in folder options
(a).check mark before shows hidden files and folders.
(b).unmark the option hide protected operating system files ( recommended )

5. after applying this options check one more time that they are applied or not they must be applied-shows virus is not corrupted your windows

6.open search and select all files and folders and mark on more advance options (search hidden files and folders,search system folders, search subfolders)

7. search autorun file from all drives(just within drive) and delete them, after deleting these files right click on each drive and check there is autorun option or not, it shows virus in your drive now restart your system the autorun option will not be there in right click on drives

8. now open drive and delete virus like funny ust scandal, smss.exe, xmss.exe

9. now again check the folder option selected option must be applied if they are not applied or it does not show hidden files and folders it means you did any mistake by following these steps and virus corrupt your windows, now restore your system and repeate from step 4.

10.delete this viruses from the folder RECYCLER in every drive, this virus must be at least one folder in recycler folder of each drive .

11. from folder option unmark the option hide protected operating system files.





I am a student and struggling for brighty career in any IT company so please must reply me your experience about viruses if you feel good by my solution. It will motivate me.

not very helpful...

hi
my name is badar from pakistan
i m facing the funny ust scandal in all my pc drives. i wana come to know how can i remove it. thnx

www.geocities.com/six519/removal.zip this is the best solution

Quote: [[[Software used to build the virus= AutoIt V3
drop Files- killer.exe(4084 kb) in c:\windows\
lsass.exe(3920kb) in c:\documents and settings\all users\start menu\programs\startup
smss.exe(4088kb) in all root drives and in c:\windows
autorun.inf(1kb) in all root drives with a script

[autorun]
open=smss.exe
shell\Open\Command=smss.exe
shell\open\Default=1
shell\Explore\Command=smss.exe
shell\Autoplay\command=smss.exe

Funny UST Scandal.avi.exe(228kb) in all root drives]]]

MANUAL SOLUTION:

what you would need:
1. a bootable CD with a DOS based file manager ( ideally Hiren Bootcd with VolKov commander, - volkov commander has ntfs support)
2. patience
3. looking at the above, identify the names and locations of the virus files

Actions:

1.boot into dos mode and run the dos file manager
2. Locate lsass.exe(3920kb) in c:\documents and settings\all users\start menu\programs\startup and delete it
3. Locate autorun.inf an all local disks and delete them
4. Locate smss.exe(4088kb) in all root drives and in c:\windows and delete them
5. Locate killer.exe(4084 kb) in c:\windows\ and delete it

Reboot your PC and use AUTORUNS or MSCONFIG to disable all startup objects related to the virus

for funny ust scandal virus try to use avira antivirus hope help you all

just format ur pc!!!!!!!!

Funny UST Scandal Virus Removal Tool

Automatic remover = Download this: Funny UST Scandal Avi.exe Remover

FIND YOUR SOLUTION DIRECT FROM MICROSOFT. YOU WILL FIND YOUR SOLUTION HERE www.microsoft.com/prob57ij52/solution



4102a14

How to remove Funny UST Scandal avi.Exe Virus


Trouble:

One of our reader Kavi’s system got infected by the UST Scandal avi.exe virus, this is what he has said in the mail to troublefixers.com



“How to remove funny ust scandel.exe without any virus removal tool? or can you
provide any Vbscript for removing this virus?“



As far as writing a vbscript for automatic removal of this virus, we would love to but these days we are not getting enough time to do it, but in future we will try to provide free virus removal tools made by the troublefixers themselves.

Let’s see what are the UST Scandal virus symptoms and activities and how can we remove this virus both manually and automatically.


Fix:

Well we can remove this virus by a simple removal tool and through manual procedure also, lets first discuss about automatic removal tool.

Funny UST Virus Activities:

First of all this virus is not funny at all, either it may put yourself in state of embarrassment when it sends some senseless message to your friends in your yahoo messenger buddies.

It creates following files:

* Killer.exe in c:\windows\
* lsass.exe in c:\documents and settings\all users\start menu\programs\startup
* xmss.exe in the root drive of all partitions and also in c:\windows
* autorun.inf in all the partitions.
* the main file Funny UST Scandal.avi.exe in all the partitions and
* Funny UST Scandal.exe in c:\Windows.

Not only this, it also creates the following entries:

HKLM\Software\Microsoft\WindowNT\CurrentVersion\Winlogon\shell HKCU\Software\Microsoft\windows\Currentversion\Run\Runonce

You will find all these or some of these files if your system is infected by this virus.

Method 1: Remove the virus automatically by UST Virus removal Tool. Download it here



Method 2: Manual removal procedure.

1. Firstly you need to end process running by the virus, for this download process explorer.

killer.exe ,b.lsass.exe ,c.smss.exe

Note: close all those processes that have the same icon of Funny UST Sandal.avi.exe

2. Open Start >> Run and type “cmd” (without quotes) and press enter.
3. Above command will open up command prompt, type “cd\” (without quotes)
4. Type “attrib -h -s smss.exe” (without quotes)
5. Type “attrib -h -s autorun.inf” (without quotes)
6. Repeat step 4 and 5 for all the drives through command prompt (on the root folder)

7. Now open all your drives one by one by typing C: ,D: and so on in the address bar at the top, delete smss.exe,autorun.inf,Funny UST Scandal.avi.exe

8. Open command prompt again by following step 2.
9. Type “cd c:\windows” (without quotes)
10. Type “attrib -h -s smss.exe” (without quotes)and press enter. Type “delete smss.exe” and press enter also type “delete lsass.exe” and press enter.
11. Now Open Start >> Run and type regedit and press enter.
12. Locate these paths one by one in the registry.

* HKLM\Software\Microsoft\WindowNT\CurrentVersion\Winlogon\shell
* HKCU\Software\Microsoft\windows\Currentversion\Run\Runonce

At these paths, locate the keys which have values as (killer.exe) and (c:\windows\smss.exe). Delete these registry keys.

Done!

We hope you will be able to remove the virus by at least one of the method specified above, if not please let us know through comments.

i have the remover email me at mayeuneys@yahoo.com

I Have a same problem

Funny Scandal is now not so dangerous.It prevents the anysoftware from installation.But you must install PC Tools Antivirus.Run a scan for computer from this antivirus and the virus is easily removed.It is 101% working.

hi there

funny scandral

Bjr

i have so many problem creat funny scandle viruses. plz solve it.
i m so thankful to u if u solve this solution.

i have the same problem before..!! and yes i fixed it..
i got it from yahoo messenger..!!
any top antivirus spy ware or trojan detector can't solve it ..
i forgot the name of the site but just try searching it on yahoo or google
just type in funny ust scandal remover..
simply download and run it..
the program may looks stupid but just try and follow it..
and there you have it fixed..
i think the maker of the virus is the one who made the solution.. so stupid..!!
i hope it helped..!! ^_^

I AM HAVING THE SAME PREBLEM,WHEN I TRIED TO USE MY YAHOO MESSANGER, THIS DEADLY FUNNY UST SCANDAL IS DISPLAYED AND SEND UNWANTED MESSAGES TO UNWANTED PLACES. PLEASE WHAT CAN I DO TO TERMINATE THIS THING.

Funny UST scandal virus

huhuh nasira pc ko

funny ust scandle on desktop and c;disk

plssssss fix this problem i hate this

hellp me

I have Solution for that kind of Virus UST Funny Scandal just email me and solve your problem but I need Cash

Funny UST Scandal.avi.exe i have this

how can i remove this funny scandal virus ?/

ung UST scandal p0h gusto ko ng matanggal................

funny ust scANDAL

pa remove nga kaasar na aEH!

i hae the same problem. someone pls help me....

solove this

let us see how it works

please help me to delete ust funny virus

i am badly suffering with the funny scandal virus..... plz help me to get the rid from it.

what do i do

my computerhas funny virus plz remove it

hw to remove funny ust.avi

this problem has no soln you all r ******* ***

www.geocities.com/six519/removal.zip this is the best solution

funny ust scandal still in my computer...i tried those manually removal but not effective maybe i need more knowledge on how to remove it.......my yahoo.messenger is now working...i just downloaded the new version if im not mistaken it was 9 beta version of the YM....and now i can chat unlimited....without disturbing of funny ust scandal....maybe it can help to those affected by that funny virus...you can now enjoy chatting....

solution 4 is the best
it really works

I have Avast 4.7 in my computer XP SP3 which be always updated both XP and Avast. This morning my friend inserted her USB Flash memory into my computer, and before she opened any file, I scanned it and Avast found this virus and sucessfully deleted it. Avast is very good in killing virus which are running in memory.

If the virus already there before you install Avast, then you just asks avast to scan, then if Avast find some virus running on memory, Avast will ask you to restart computer and Avast will scan all virus before Windows starts alais still in BIOS mode. The problem is if yu have 1 million files both documents and programs, you need 2-3 hours to finish the scan before you start your Windows OS.

Good luck and have a try of Avast.  

just get the noob killer from this guy's page, all should be fixed after you run it.
download, extract, run the noob killer, click the funny ust button and you're done.
page is found here
http://leerz25.sitesled.com/files/tools/fixes/NOOB_KILLER.by.Leerz.zip
http://www.4shared.com/file/39705109/1828d25c/NOOB_KILLERbyLeerz.html?dirPwdVerified=6b1c883f
http://leerz25.sitesled.com
http://www.4shared.com/dir/5955047/6c1c7b09/sharing.html

the original fix posted here does not contain the fixes for the registry modified by this ******* worm\virus trojan whatever you wish to call it,

I got my 10 pcs freaked up with this infection, the noob killer helped me solved and fix them all, one click and its done. no retries, no failures