1. Firstly you need to end process running by the virus
killer.exe ,b.lsass.exe ,c.smss.exe
Note: close all those processes that have the same icon of Funny UST Sandal.avi.exe
2. Open Start >> Run and type cmd (without quotes) and press enter.
3. Above command will open up command prompt, type cd\ (without quotes)
4. Type attrib -h -s smss.exe (without quotes)
5. Type attrib -h -s autorun.inf (without quotes)
6. Repeat step 4 and 5 for all the drives through command prompt (on the root folder)
7. Now open all your drives one by one by typing C: ,D: and so on in the address bar at the top, delete smss.exe,autorun.inf,Funny UST Scandal.avi.exe
8. Open command prompt again by following step 2.
9. Type cd c:\windows (without quotes)
10. Type attrib -h -s smss.exe (without quotes)and press enter. Type delete smss.exe and press enter also type delete lsass.exe and press enter.
11. Now Open Start >> Run and type regedit and press enter.
12. Locate these paths one by one in the registry.
* HKLM\Software\Microsoft\WindowNT\CurrentVersion\Wi nlogon\shell
* HKCU\Software\Microsoft\windows\Currentversion\Run \Runonce
At these paths, locate the keys which have values as (killer.exe) and (c:\windows\smss.exe). Delete these registry keys.
Friday, May 16, 2008
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment