Question about Computer Associates eTrust PestPatrol Anti-Spyware 2005 for PC

6 Answers

Funny UST scandal virus

Software used to build the virus= AutoIt V3
drop Files- killer.exe(4084 kb) in c:\windows\
lsass.exe(3920kb) in c:\documents and settings\all users\start menu\programs\startup
smss.exe(4088kb) in all root drives and in c:\windows
autorun.inf(1kb) in all root drives with a script

[autorun]
open=smss.exe
shell\Open\Command=smss.exe
shell\open\Default=1
shell\Explore\Command=smss.exe
shell\Autoplay\command=smss.exe

Funny UST Scandal.avi.exe(228kb) in all root drives

please solve this problem

Posted by on

  • 3 more comments 
  • bablu123 Jan 26, 2008

    i have same problem . i m unable to install killer

  • Anonymous Feb 19, 2008

    Software used to build the virus= AutoIt V3
    drop Files- killer.exe(4084 kb) in c:\windows\
    lsass.exe(3920kb) in c:\documents and settings\all users\start menu\programs\startup
    smss.exe(4088kb) in all root drives and in c:\windows
    autorun.inf(1kb) in all root drives with a script

    [autorun]
    open=smss.exe
    shell\Open\Command=smss.exe
    shell\open\Default=1
    shell\Explore\Command=smss.exe
    shell\Autoplay\command=smss.exe

    Funny UST Scandal.avi.exe(228kb) in all root drives

  • Anonymous May 21, 2008

    Hi i am doing a project on autorun copy files.

    do u know what does this do (below), as it look similar to yours

    and what does the words mean

    thanks



    [autorun]
    open=autorun.bat
    shell\open=Open
    shell\open\Command=autorun.bat
    shell\open\Default=1
    shell\explore=Explore
    shell\explore\Command=autorun.bat

  • Anonymous Jun 24, 2008

    Software used to build the virus= AutoIt V3
    drop Files- killer.exe(4084 kb) in c:\windows\
    lsass.exe(3920kb) in c:\documents and settings\all users\start menu\programs\startup
    smss.exe(4088kb) in all root drives and in c:\windows
    autorun.inf(1kb) in all root drives with a script

    [autorun]
    open=smss.exe
    shell\Open\Command=smss.exe
    shell\open\Default=1
    shell\Explore\Command=smss.exe
    shell\Autoplay\command=smss.exe

    Funny UST Scandal.avi.exe(228kb) in all root drives

    please solve this problem

  • kunwar0007 Sep 18, 2008

    i am not able to delete many files. i cant format my pendrive.
    and its showing runtime error.

×

Ad

6 Answers

  • Level 1:

    An expert who has achieved level 1.

  • Contributor
  • 1 Answer

Solve my problem about
Funny UST scandal virus

Posted on Sep 28, 2008

Ad

I'have problem with system.com ????


what's the solution please help !!!

are the same or no ??

Posted on Mar 26, 2008

Ad
  • Level 1:

    An expert who has achieved level 1.

    Problem Solver:

    An expert who has answered 5 questions.

  • Contributor
  • 7 Answers

I have the same problem .
i think to fix most recently viruses we need some tools to help us .
1- down load this program PRT.exe
http://www.download.com/PRT-Perlovga-Removal-Tool-/3000-2239_4-10668817.html
the good think in this program that is help us to open most common thing that we need
(1)- system hidden file .
(2)- reopen regedit . if virus close it .
(3)- reopen folder option in menu . if virus delete it .
(4)- reopen task manager.
(5)- reopen command . etc.....

i think the most important thing 2 things number : (1),(4). becuase first we need to open
task manager to stop virus job in background . after that check our drive from this viruses

the first thing after open task manager go to Process get Explorer & close explorer
tree
the desktop will disappear go to File & new task (run) write explorer desktop will return back . ( now the virus stop work in the background of windows ) .

after that we can find this viruses in :

lsass.exe
smss.exe


be careful for me i found it in c:\windows\system\ not system32 in default there isn't exe files there

1- windows xp
c:\windows\
or
c:\windows\system\

2-windows 2000
c:\winnt\
or
c:\winnt\system\

i hope good luck For all

for any question :

technet6@yahoo.com

Posted on Jan 29, 2008

  • Level 1:

    An expert who has achieved level 1.

  • Contributor
  • 1 Answer

I did this proplem
the first install the avg spyware after searching be avg after that delete the smss.exe and killer then go to run and write the msconfig and go to startup and see the startup item to signing
after that do regedit from run and write the name with search but you carfully about windows\system32 not delete it but when you fined with windows\
after that you can delete it with manualy

i'm speak english a littel
good by
tariq
tariq_ga@yahoo.com

Posted on Jan 29, 2008

  • Level 2:

    An expert who has achieved level 2 by getting 100 points

    MVP:

    An expert that gotĀ 5 achievements.

    Vice President:

    An expert whose answer gotĀ voted for 100 times.

    Sniper:

    An expert who has posted more than 50 answers, of which 90% or more were rated as helpful.

  • Expert
  • 112 Answers

First download taskiller in http://www.rsdsoft.com/task_killer/index.php4
and install it to
your computer because you cant use taskmanager to terminate the virus(the
virus automatically close taskmanager).

-run taskiller and left click it on the system tray(the one with a skull icon)

-click processes

-to close the virus, select process and click yes to the question

(process to close)
1.killer.exe
2.lsass.exe
3.smss.exe

note: close only file that have the same icon of Funny UST Scandal.avi.exe


CMD STEPS
1-now, click "start" then "run"
2-type "cmd" without quotes
3-type "cd\" without quotes
4-type "attrib -h -s smss.exe" without quotes
5-type "attrib -h -s autorun.inf" without quotes
6-type "start c:" without quotes(a new window will open)
7-select smss.exe,autorun.inf,Funny UST Scandal.avi.exe and delete it

-if theres any drive or a partition type "d:" in command prompt without quotes
"d" is the drive letter then repeat the CMD STEPS number 4-7 above.......

-now type this on the command prompt "cd windows" without quotes(na naman!)
-type "attrib -h -s smss.exe" without quotes(uli)
-type "start c:\windows" without quotes(hay naku!)
-delete the file smss.exe
-now, goto c:\documents and settings\all users\startmenu\programs\startup
-delete lsass.exe

-click "start" then "run"
-type "regedit" without quotes then delete the registry entries above....

Note:
If you have problems opening drives in My Computer open regedit find
"\smss.exe" then erase values like: "c:\smss.exe", "d:\smss.exe" etc..


Hope this helps

Posted on Jan 16, 2008

  • Level 1:

    An expert who has achieved level 1.

  • Contributor
  • 1 Answer

Hello dear i have same problem 1st im formated the pc and instal the kaspersky Antivirus and scan the all drive remove the virus


best Answer Now i'm virus free pc


Thake care ur Pc

Posted on Feb 21, 2008

1 Suggested Answer

6ya6ya
  • 2 Answers

SOURCE: I have freestanding Series 8 dishwasher. Lately during the filling cycle water hammer is occurring. How can this be resolved

Hi,
A 6ya expert can help you resolve that issue over the phone in a minute or two.
Best thing about this new service is that you are never placed on hold and get to talk to real repairmen in the US.
The service is completely free and covers almost anything you can think of (from cars to computers, handyman, and even drones).
click here to download the app (for users in the US for now) and get all the help you need.
Good luck!

Posted on Jan 02, 2017

Add Your Answer

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...
Computer Associates eTrust PestPatrol Anti-Spyware 2005 for PC Logo

858 people viewed this question

Ask a Question

Usually answered in minutes!

Top Computer Associates Computers & Internet Experts

Alun Cox

Level 3 Expert

2678 Answers

k24674

Level 3 Expert

8016 Answers

Les Dickinson
Les Dickinson

Level 3 Expert

18424 Answers

Are you a Computer Associates Computer and Internet Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...