Files missing?
My Computer not opening?
Programs not opening?
Installations not occurring?
Task Manager not opening?
System deadly slow?
If your case can be matched with the conditions given above, in all probability, you’ve got the Autoit.BD worm, better known by a file it deposits in your C:\ drive, Funny UST Scandal.avi.exe. Pretty annoying. Almost nothing you can do. Only NOD32 v3 with updates can detect this trouble maker worm. Kaspersky can detect, but cannot remove. AVG, Norton, Avast! - all don’t even detect the virus.
Wait! Don’t format your system yet! Its a pretty simple virus to remove, and won’t take more than 10 minutes. It is recommended that you start up in Safe Mode before you do the following steps to remove the virus -
[scroll down for a file which automates all this]
- Download and install TaskKiller (326 KB freeware). We’re doing this because we need to remove a few tasks running, and Windows Task Manager (Alt + Ctrl + Del) gets killed by the virus
- Run Task Killer, and a red skull icon will appear on the system tray
- Left click it, and click Processes
- Select to kill these processes -
- killer.exe
- lsass.exe
- smss.exe
- Now open up Command Prompt (Start>Run>command). Type each command and press Enter to run it -
- cd\
- attrib -h -s smss.exe
- attrib -h -s autorun.inf
[NOTE : Type each command exactly as its given here]
- Open My Computer and go to C:\ or whichever partition in which you’ve installed Windows.
- Delete the following files -
- smss.exe
- autorun.inf
- Funny UST Scandal.avi.exe
- Go to Command Prompt again. Run this command -
- attrib -h -s smss.exe
- Go to C:\Windows or wherever else you’ve installed Windows, and delete the file smss.exe.
- Now, go to C:\Documents and Settings\All users\Startmenu\Programs\Startup and delete the file lsass.exe.
- Open Registry Editor (Start>Run>regedit)
- Delete the key HKEY_LOCAL_MACHINE\Software\
Microsoft\WindowNT\CurrentVersion\Winlogon=shell(killer.exe - Delete the key HKEY_CURRENT_USER\Software\
Microsoft\windows\Currentversion\Run=runonce(c:\windows\smss.exe) - You’re done!
OR, you can just download a remover file : Download Autoit.BD remover
- After downloading, unzip, and run the exe file.
- Then, do the steps 11, 12 and 13 as mentioned above.
- You’re done
Thanks to fs6519 for recommending these steps, and making the remover file.
I hope that this post was useful. Cheers
Technorati Tags: autoit.bd, worm, funny UST scandal, fs6519, removal, worm removal, virus removal, installation stopping, task manager not opening, smss.exe, Funny UST Scandal.avi.exe
Sphere: Related Content