Before following my procedure, please run the virus remover with method 1 described by rohit, first! It will remove some of the virus component (though not all, because after thorough search in my hard drive, i still find some of them there). But the virus remover did a good job in enabling us to use the command prompt. Therefore, you need to remove manually for the rest. To use this method, you need to have some basic knowledge in how to use command prompt because you need to move from folder to folder and understand some of DOS commands.

Answering Asif question:
I had the same problem with asif as I can’t delete the virus which is:Funny UST Scandal.avi.exe. The problem is because the virus has space between it. And in command prompt/DOS prompt, you can’t delete filename with space bwetween it. I will explain how to delete it, but before that, you could check whether some of the virus components are still in ur harddrive:

In my example, i am refering to check on C: prompt and on C:\windows prompt because i find the virus components still there for me. You might need to check it in other suspected folder and sub folders yourself. Anyway, you can type the command to show hidden files which is Dir/ah/p at each command prompt as shown below:
C:\>Dir/ah/p
and
C:\Windows>Dir/ah/p

/ah = it will show all hidden files in the folder
/p = pause the scrolling screen so you can find it slowly

For people who don’t know what DIR for, it instruct the PC to list down all the files in the current folder to your screen. But it only display non hidden files, as the virus files are hidden, you need /ah command. And some folders will contain alot of files, therefore you need to use /p command to pause at each scroll. Anyway, back to our problem:

You might find that autorun.inf, smss.exe or Funny USt Scandal.avi.exe is still shown in some of ur folder

Therefore, please follow this command in C:\> prompt:
C:\>Attrib -h -s -r funny*.exe /s
C:\>Del /p funny*.exe /s

/s = it will run the command in all folder and subfolder for the virus
/p = it will ask confirmation when you delete the file. It will prevent you to delete other files if you make some mistake in typing by asking confirmation before deleting.

Note: It will take few mins and longer if you have slower computer when using /s command. Because it search in all folder and subfolder of the specified drive (in this case, C drive). Just be patient and do other things until they finished doing their work.

By using funny*.exe, it means it will delete all executables files (exe) with the words funny in front of it such as funny.exe, funny UST Scandal.avi.exe, funny UST.exe, funnyscandal.exe, and so on.

And please do the same thing for autorun.inf. From C:\> prompt:
C:\>Attrib -h -s -r autorun.inf /s
C:\>Del /p autorun.inf /s

For smss.exe, you have to be careful. Because smss.exe located in C:\Windows>System32 is a valid windows file. So, I would not recommend using the /s command for smss.exe. Just go to C:\> and C:\Windows> folder and use Dir/ah/p on those 2 folders to see whether the file is displayed or not.

Don’t forget to repeat all of the above for killer.exe. Most of the time it already deleted by the virus remover. But sometimes you can reintroduce it again when you insert flashdisk/thumbdrive/pendrive or whatever you called the removable drive that still contain the virus.

Answering sharjeel:
I tried to remove the virus manually after I use the virus remover program mentioned in method 1 by rohit.

1. I think if you already use the virus remover, dont kill lsass.exe, as that one left in ur taskmanager is the valid one required by windows.

2. You have to use the command: Dir/ah from command prompt to find them. If you try to look for them from windows by looking at folder or subfolder, you wont find them always because some of them is hidden.

3. Look for my explanation aboce (explanation for asif)

I know asif or sharjeel might already solve their problem, but I am posting this to help other people still having the problem with this annoying virus.

One more thing, if you want to remove the virus from your flashdisk/thumbdrive/pendrive/other drive, then you need to remove it manually from command prompt. The virus remover only clear virus in your C drive/primary harddisk. When you plug in ur flashdisk/thumbdrive/pendrive/other drive, if the autorun command is active, you might re-contaminate your computer. So, first run the virus remover, second remove the virus manually again from your harddisk from command prompt, then go into the directory of your flashdisk/thumbdrive/pendrive/other drive (Might be D:, E:, F:, G:, etc) from command prompt and remove it manually.

Again basic DOS prompt is necessary for removing this virus manually. Hope my explanation will be helpful.

though i used the method given above it is killing the virus for temporary plz help me out in killing permentally

Thanks thanks!

First of all I would like to acclaim your knowledge about computer softwares and your generosity.

But I encountered following problems when I tried to remove Funny UST Scandal.avi from my Computer.

1 when I killed Iass.exe,Smss.exe process with the help of process explorer,a message appeared that my computer will be shutdown within 2 mins and it happened so.

2 secondly when I tried to delete Smss.exe and Killer it shows a message that File not Found

3 Methoud 1 shows a message that No virus Is Running

But Iam sure that My computer is Infected by Scandal.avi because It appears in some of my drive

Iam sure that you can solve this problem without any hesitation.Please Help me I would be thankful to you

I’m running Windows 2003 Enterprise server and I’m infected by the DOTEX.32 virus which is detected but cannot be cleaned. Help!

Salim