CariDotMy

 Forgot password?
 Register

ADVERTISEMENT

View: 2807|Reply: 10

Ade sesape tau tak antivirus utk virus ni

[Copy link]
Post time 10-12-2007 07:55 PM | Show all posts |Read mode
semua pc kat umah aku dah dilande virus yang name "Funny UST Scandal.avi"

korang tau antivirus ape yang boleh pakai..
setakat ni aku dah pakai AVG,Kapersky,Bitdefender ngan Avira...
tapi semue tu tak jalan..

external hardisk aku pun dah format,tapi still ade lagi...huhu..
please,aku dah tak tau nak wat ape dah ngan virus nie..

ni pic die
Reply

Use magic Report


ADVERTISEMENT


Post time 10-12-2007 08:03 PM | Show all posts
cuba try eScan...
Reply

Use magic Report

Post time 10-12-2007 08:04 PM | Show all posts
skuter..aku jumpa nih...try la..

HOw to remove this lame virus Funny UST Scandal.avi????

-first download taskiller in http://www.rsdsoft.com/task_killer/index.php4
and install it to
your computer because you cant use taskmanager to terminate the virus(the
virus automatically close taskmanager).

-run taskiller and left click it on the system tray(the one with a skull icon)

-click processes

-to close the virus, select process and click yes to the question

(process to close)
1.killer.exe
2.lsass.exe
3.smss.exe

note: close only file that have the same icon of Funny UST Scandal.avi.exe


CMD STEPS
1-now, click "start" then "run"
2-type "cmd" without quotes
3-type "cd\" without quotes
4-type "attrib -h -s smss.exe" without quotes
5-type "attrib -h -s autorun.inf" without quotes
6-type "start c:" without quotes(a new window will open)
7-select smss.exe,autorun.inf,Funny UST Scandal.avi.exe and delete it

-if theres any drive or a partition type "d:" in command prompt without quotes
"d" is the drive letter then repeat the CMD STEPS number 4-7 above.......

-now type this on the command prompt "cd windows" without quotes(na naman!)
-type "attrib -h -s smss.exe" without quotes(uli)
-type "start c:\windows" without quotes(hay naku!)
-delete the file smss.exe
-now, goto c:\documents and settings\all users\startmenu\programs\startup
-delete lsass.exe

-click "start" then "run"
-type "regedit" without quotes then delete the registry entries below....

Registry
Entries-HKLM\Software\Microsoft\WindowNT\CurrentVersion\Wi  nlogon=shell(killer.exe)

HKCU\Software\Microsoft\windows\Currentversion\Run  =runonce(c:\windows\smss.exe)

Note:
If you have problems opening drives in My Computer open regedit find
"\smss.exe" then erase values like: "c:\smss.exe", "d:\smss.exe" etc..

[ Last edited by  pdi76 at 10-12-2007 08:07 PM ]
Reply

Use magic Report

Post time 10-12-2007 08:07 PM | Show all posts

Reply #1 skuter_buruk146's post

virus ni virus baru,nanti meha gi cari cure tunggu ya





Cari Idol Competition




Cari New Members Contezz

Reply

Use magic Report

Post time 10-12-2007 08:08 PM | Show all posts

Reply #3 pdi76's post

ni mungkin boleh sebab selalunya kalau manual remove ni menjadi,lagipon virus ni baru lagi.





Cari Idol Competition




Cari New Members Contezz

Reply

Use magic Report

Post time 10-12-2007 08:15 PM | Show all posts
rasa2nye pun boleh tu...cam virus MicrosoftPowerPOint.exe ari tu...cam siot jek..letih mencari cure...sib baik ada gak..heeh...

virus ni originated dari filipin ah...
Reply

Use magic Report

Follow Us
 Author| Post time 10-12-2007 08:59 PM | Show all posts

Reply #3 pdi76's post

hoho..banyak nye step die..
nanti aku cube try ye..

hopefully menjadik le..
tq..
Reply

Use magic Report

Post time 10-12-2007 09:33 PM | Show all posts

Reply #7 skuter_buruk146's post

ko try remover ni
Funny UST Scandal Avi.exe Remover


kalau tak ok ko buat manual remove la

GudLuck
Reply

Use magic Report


ADVERTISEMENT


 Author| Post time 11-12-2007 01:17 AM | Show all posts
okey..aku dah try buat dah..tapi memang ade banyak problem nak wat sume ni..
ni aku bagitau part mane yang tak bleh wat yea..

-first download taskiller in http://www.rsdsoft.com/task_killer/index.php4
and install it to
your computer because you cant use taskmanager to terminate the virus(the
virus automatically close taskmanager).

-run taskiller and left click it on the system tray(the one with a skull icon)

-click processes

-to close the virus, select process and click yes to the question

(process to close)
1.killer.exe (bende ni takde dalam list processes to close)
2.lsass.exe (yang ni plak,ble aku close,die terus restart)
3.smss.exe

note: close only file that have the same icon of Funny UST Scandal.avi.exe (icon yang same ngan virus ni takde,so part ni aku tak buat)


CMD STEPS
1-now, click "start" then "run"
2-type "cmd" without quotes
3-type "cd\" without quotes
4-type "attrib -h -s smss.exe" without quotes (yang ni plak, ble enter die kluar File not found. tapi tak pe,aku trus next step)
5-type "attrib -h -s autorun.inf" without quotes
6-type "start c:" without quotes(a new window will open)
7-select smss.exe,autorun.inf,Funny UST Scandal.avi.exe and delete it


step sterusnye aku tak wat sebab memang dah bleh wat..hehe..
btw, virus tu dah tak de..ape pendapat ko?
Reply

Use magic Report

 Author| Post time 11-12-2007 01:19 AM | Show all posts
Originally posted by ami_kidz125 at 10-12-2007 09:33 PM
ko try remover ni
Funny UST Scandal Avi.exe Remover


kalau tak ok ko buat manual remove la

GudLuck


okey..aku dah try buat..

kalo dalam c: die dah remove..
tapi untuk external hardisk nie aku terpakse gune manual remove

tq..
Reply

Use magic Report

Post time 11-12-2007 12:02 PM | Show all posts

Reply #9 skuter_buruk146's post

so virus tu dah clean dari komputer ko la? mungkin ada option lain nak delete virus ni.. try dalam safe mode.. atau cuba guna spybot/ad-aware (update dulu sebelum scan) sebab Funny UST Scandal.avi.exe ni malware tak silap aku bukan virus.. aku rasa spybot/ad-aware boleh buang benda ni..
Reply

Use magic Report

You have to log in before you can reply Login | Register

Points Rules

 

ADVERTISEMENT



 

ADVERTISEMENT


 


ADVERTISEMENT
Follow Us

ADVERTISEMENT


Mobile|Archiver|Mobile*default|About Us|CariDotMy

3-11-2024 10:31 PM GMT+8 , Processed in 0.722874 second(s), 22 queries , Gzip On, Redis On.

Powered by Discuz! X3.4

Copyright © 2001-2021, Tencent Cloud.

Quick Reply To Top Return to the list