After receiving many complaints from people’s about this virus, I
finally decided to guide the users about the removal of this virus.
Some of the problems caused by this virus are :
1. Show Hidden Files and Folders not working.
2. My Computer Drives open another explorer window.
3. When you run a program, just in 2 or 3 minutes the program
dissappears (Actually runs in background but you can not see its window
Removal of this Virus
Unfortunately, I have no removal tool to remove this virus at the
time of writing, but you will soon see one. You can try the manual
removal of it.
Caution : While the manual process is going on, do not open any My Computer drive.
1. Open up cmd by typing cmd in Start –> Run.
2. Type in cmd
taskkill /f /im smss.exe
taskkill /f /im killer.exe
3. The virus placed some files at the root of every drive so you need to clean them.
Repeat the following commands on cmd for all your drives (Here it is applied for C drive)
del /a:h /f c:\autorun.inf
del /a:h /f c:\smss.exe
del /a:h /f c:\funny ust scandal.avi.exe
4. Now you need to delete files in windows folder so type :
del /a:h /f c:\windows\killer.exe
del /a:h /f c:\windows\autorun.inf
del /a:h /f c:\windows\smss.exe
del /a:h /f c:\windows\funny ust scandal.exe
5. Now you need to delete one more file :
del /a:h /f “%userprofile%\Start Menu\Programs\Startup\lsass.exe”
6. Use PowerExes
to delete startup entries like.
lsass.exe(if it does not remove then only uncheck it)
7. To restore Folder Option Settings
Follow this page
Show Hidden Files And Folders Not Working
8. To Remove the virus from Flash Drive
, Insert a flash drive cancel any Autoplay box.
Open cmd and type (Replace x by your usb drive letter)
del /a:h /f x:\autorun.inf
del /a:h /f x:\smss.exe
del /a:h /f x:\funny ust scandal.avi.exe"
(source of info can be found here