How To Remove Funny ust Scandal Virus From Yahoo Messenger On My Computer

July 27th, 2009

Funny ust scandal virus is a notorious virus, which takes over your Yahoo Messenger account and starts controlling the messenger by itself if it gets on our system. It starts buzzing your Yahoo Messenger contacts even if you do not buzz them and also starts sending them weird messages. The funny part is, it does this even if you are actually online and this gets very annoying.

Here’s more technical information about Funny UST Scandal Virus

Software used to build the virus= AutoIt V3
drop Files- killer.exe(4084 kb) in c:\windows\
lsass.exe(3920kb) in c:\documents and settings\all users\start menu\programs\startup
smss.exe(4088kb) in all root drives and in c:\windows
autorun.inf(1kb) in all root drives with a script

[autorun]
open=smss.exe
shell\Open\Command=smss.exe
shell\open\Default=1
shell\Explore\Command=smss.exe
shell\Autoplay\command=smss.exe

Funny UST Scandal.avi.exe(228kb) in all root drives

Here’s a solution to Fix the Funny ust Scandal Virus in Yahoo Messenger:

You can download automatic remover from here.

Or you can go the manual way which is more reliable.

You first need to have a task killer installed on your system. If you do not have one, you can download one from here and install it. Well some of you may say that you already have taskĀ  manager to kill the processes, but more likely your task manager will be disabled and hence you need an external program.

Use the task killer to kill the process mentioned above, namely – killer.exe, lsass.exe and smss.exe

note: close only file that have the same icon of Funny UST S*andal.avi.exe

After you done with the above process, do the following :

1> Click on Start –> Run –> type cmd
2> Once the command prompt comes up type cd\ –> attrib -h -s smss.exe hit enter –> attrib -h -s autorun.inf hit enter.
3> Type start c: , this will open a new window
4> select smss.exe,autorun.inf,Funny UST Scal.avi.exe and delete it

If you have more than one drives then follow the same steps mentioned above and replace the drive name with c: in step 4.

Once you are done with the above process, open registry editor (you can open the registry editor by clicking on Start –> Run –> type in regedit)

Once the registry editor opens, navigate to and delete the following keys from registry editor:

HKLM\Software\Microsoft\WindowNT\CurrentVersion\Winlogon=shell(killer.exe)
HKCU\Software\Microsoft\windows\Currentversion\Run=runonce(c:\windows\smss.exe)

This will slove your Funny ust Scandal Virus.avi.exe problem, and this will ensure you remove the Yahoo Messenger Auto Buzz Virus from your system.

Related post: Mytermex.com, Nsl-school.org – Yahoo Messenger Virus

Be Sociable, Share!

Related posts:

  1. Mytermex.com, Nsl-school.org – Yahoo Messenger Virus
  2. Recover Lost Password Of MSN , Yahoo, Windows, Google Talk, ICQ, AOL Instant Messenger
  3. Is Awola A Spyware / Malware – How Can I Remove/Delete Awola Anti Virus
  4. A New Yahoo Virus ?
  5. Messenger Plus ! now compatible with Windows Live Messenger 9

  1. No comments yet.
  1. No trackbacks yet.