Posts Tagged ‘virus’
Remove Funny ust Scandal Virus From Yahoo Messenger On My Computer
This how to Remove Funny ust Scandal Virus From Yahoo Messenger On My Computer.
The techinical information about Funny UST Scandal Virus
Software used to build the virus= AutoIt V3
drop Files- killer.exe(4084 kb) in c:\windows\
lsass.exe(3920kb) in c:\documents and settings\all users\start menu\programs\startup
smss.exe(4088kb) in all root drives and in c:\windows
autorun.inf(1kb) in all root drives with a script
Funny UST Scandal.avi.exe(228kb) in all root drives
Before we can start to remove this virus you need to download automatic remover from here.
You also need task killer installed on your system. If you do not have one, you can download one from here and install it. Well some of you may say that you already have task manager to kill the processes, but more likely your task manager will be disabled and hence you need an external program.
Use the task killer to kill the process mentioned above, namely - killer.exe, lsass.exe and smss.exe
note: close only file that have the same icon of Funny UST S*andal.avi.exe
After you done with the above process, do the following :
1> Click on Start –> Run –> type cmd
2> Once the command prompt comes up type cd\ –> attrib -h -s smss.exe hit enter –> attrib -h -s autorun.inf hit enter.
3> Type start c: , this will open a new window
4> select smss.exe,autorun.inf,Funny UST Scal.avi.exe and delete it
If you have more than one drives then follow the same steps mentioned above and replace the drive name with c: in step 4.
Once you are done with the above process, open registry editor (you can open the registry editor by clicking on Start –> Run –> type in regedit)
Once the registry editor opens, navigate to and delete the following keys from registry editor:
HKLM\Software\Microsoft\WindowNT\CurrentVersion\Winlogon=shell(killer.exe)
HKCU\Software\Microsoft\windows\Currentversion\Run=runonce(c:\windows\smss.exe)
That all and restart your computer.
Filthy Penetration
Trojan directs computers to porn sites and drugs stores.
This new threat is not only pesky, but sleazy as well. It takes over your browser and redirects it to pornography and also salacious websites or drug stores. Security experts at MicroWorld Technologies caution computer users against probably infection of a Trojan named ‘Win32.StartPage.jo’ while visiting dubious websites or downloading freebies from untrustworthy sources on the net.
Win32.StartPage.jo changes Internet settings on the affected computer. The default home page in Internet Explorer changed to www.find-online.net. It also adds a range of porn sites and bogus drug sites in the Favorites folder and makes changes in the Windows registry to activate the Trojan at the system start-up. Source www.mwti.net
The Hidden Danger of iTunes
Have you installed all the Windows updates? Good, because most of the attackers invade your PC through loopholes in the operating system. But this can change soon. Due to the popularity of IPods, iTunes has been installed withwith QuickTimes on many computers. Hackers are now diverting attention towards this software as their new target. Meanwhile, there are bulk of updates published every few weeks for the QuickTimes software to repair the critcal loopholes there were six updates in November alone.
If there is a security loophole, a manipulated video file, for instance, is sufficient for hackers to gain access to the computer. If java is installed on the systems, attackers can confer more rights in combination with QuickTime applets, which aren’t exactly termed as being reliable. There are bugs even in the image processing routine of QuickTime enabling hackers to read the PC.
You must install the latest version of the iTunes software to view videos safely. The latest QuickTime version with all patches is available at their website. Source www.apple.com/itunes
