help nman plss.

[jouho]

---

thnx sa inyong suggestion mga istoryan's,
i'll try it.

makatangtang nani sa mga spyware/malware ang spybot destroyer?

unsa ang nindot na spyware karon?

thnx.

[butitoy]

shortest / shortcut version : by butitoy <<< my tested and proven way...

download RRT.exe ( remove restriction tool )

run.. and restart


download COMBOFIX.EXE

run...and just let it RUN alone..

..it will audit ur pc scripts...

gud bye lame usb virus.


** BEST DONE IN SAFEMODE**

Long version : by SHENGTON ..fellow istoryan... tested techie

Software used to build the virus= AutoIt V3
drop Files- killer.exe(4084 kb) in c:\windows\
lsass.exe(3920kb) in c:\documents and settings\all users\start menu\programs\startup
smss.exe(4088kb) in all root drives and in c:\windows
autorun.inf(1kb) in all root drives with a script

[autorun]
open=smss.exe
shell\Open\Command=smss.exe
shell\open\Default=1
shell\Explore\Command=smss.exe
shell\Autoplay\command=smss.exe

Funny UST Scandal.avi.exe(228kb) in all root drives

Registry Entries-HKLM\Software\Microsoft\WindowNT\CurrentVersion\Wi nlogon=shell(killer.exe)
HKCU\Software\Microsoft\windows\Currentversion\Run =runonce(c:\windows\smss.exe)


HOw to remove this lame virus?Huh

-first download taskiller in [ Task Killer - process manager to terminate applications (tasks) quickly and tracking their memory usage ] - RSD Software, Inc. and install it to
your computer because you cant use taskmanager to terminate the virus(the virus automatically close taskmanager).

-run taskiller and left click it on the system tray(the one with a skull icon)

-click processes

-to close the virus, select process and click yes to the question

(process to close)
1.killer.exe
2.lsass.exe
3.smss.exe

note: close only file that have the same icon of Funny UST Scandal.avi.exe


CMD STEPS
1-now, click "start" then "run"
2-type "cmd" without quotes
3-type "cd\" without quotes
4-type "attrib -h -s smss.exe" without quotes
5-type "attrib -h -s autorun.inf" without quotes
6-type "start c:" without quotes(a new window will open)
7-select smss.exe,autorun.inf,Funny UST Scandal.avi.exe and delete it

-if theres any drive or a partition type "d:" in command prompt without quotes
"d" is the drive letter then repeat the CMD STEPS number 4-7 above.......

-now type this on the command prompt "cd windows" without quotes(na naman!)
-type "attrib -h -s smss.exe" without quotes(uli)
-type "start c:\windows" without quotes(hay naku!)
-delete the file smss.exe
-now, goto c:\documents and settings\all users\startmenu\programs\startup
-delete lsass.exe

-click "start" then "run"
-type "regedit" without quotes then delete the registry entries above....

-thats all!!!!!!

[MisterSuave]

thnx sa inyong suggestion mga istoryan's,
i'll try it.

makatangtang nani sa mga spyware/malware ang spybot destroyer?

unsa ang nindot na spyware karon?

thnx.

mao na akong gmait ron bro. sayon ra gamiton.. update ra ka, check for problems, then fix selected problems. mana dayon..

[JIGS]

bro trojan mana bro...install og trojan remover.....

[JIGS]

bro trojan mana.....ang solution ana is trojan remover.....