How to remove the virus:

How to remove the virus:
first download taskiller in here or here and install it to your computer because you can’t use task manager to terminate the virus(the virus automatically close task manager).

run taskiller and left click it on the system tray(the one with a skull icon)
click processes
to close the virus, select process and click yes to the question

(process to close)


1. lsass.exe
2. xmss.exe
3. UST Scandal.avi.exe

note: close only file that have the same icon of Funny UST Scandal.avi.exe

CMD STEPS

1. now, click “start” then “run”
2. type “cmd” without quotes
3. type “cd\” without quotes
4. type “attrib -h -s xmss.exe” without quotes
5. type “attrib -h -s autorun.inf” without quotes
6. type “start c:” without quotes (a new window will open)
7. select smss.exe, autorun.inf, Funny UST Scandal.avi.exe and delete it


If theres any drive or a partition type “d:” in command prompt without quotes “d” is the drive letter then repeat the CMD STEPS number 4-7 above…….

* now type this on the command prompt “cd windows” without quotes.
* type “attrib -h -s xmss.exe” (without quotes)
* type “start c:\windows” (without quotes)
* delete the file xmss.exe
* now, goto c:\documents and settings\all users\startmenu\programs\startup
* delete lsass.exe

click “start” then “run”
type “regedit” without quotes then delete the registry entries above….

Windows with your name

open notepad dump the following lines into it and save it with the name OEMINFO.INI in the c:\windows\system32 directory:

* [General]* Manufacturer=Your Name Here

* Model=Your Model Here

* [Support Information]

* Line1=Your Name Here

* Line2=Your Address Here

* Line3=Your Email Address Here

* Save the file, then make a right click on my computer select properties, in the general tab a button will be highlighted (support information) make a click on it, you will be able to see the changes.

* Now if you want to display some more