Remove Win32 AutoRun Worm-Funny UST scandal

Win32 AutoRun Worm-Funny UST scandal worm create a hidden background service (xmss.exe). It copied itself on Local disk and Windows Directory (%Windir%). Terminated “Windows Task Manager”, Windows Command Prompt (DOS-Prompt) & crashed System Internal Process Explorer (procxp.exe).

Files created by this worm
* x:autorun.inf
* x:xmss.exe
* x:Funny UST Scandal.avi.exe
* %Windir%\autorun.inf
* %Windir%\xmss.exe
* %Windir%\Funny UST Scandal.avi.exe

How to remove
1. Disabled System Restore for Temporary - KB 264887
2. Boot Windows in Safe Mode - KB 315222

3. In Windows Safe Mode, Open Windows Registry Editor

Windows Start > Run > Regedit
Browse to the following registry settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon\Shell
Replace the value 'explorer.exe, xmss.exe' with 'exporer.exe'

4. Delete all the following files

* C\autorun.inf
* C\xmss.exe
* C\Funny UST Scandal.avi.exe
* X:\autorun.inf
* X:\xmss.exe
* X:\Funny UST Scandal.avi.exe
* %Windir%\autorun.inf
* %Windir%\xmss.exe
* %Windir%\Funny UST Scandal.avi.exe

5. Clean All Windows Temporary Files
6. Restart the Windows

** edit registry values with false data can damage your OS **

Diiferent Type of Security Threats

SpywareSpyware can make your computer unstable or unusable; enables others to record your keystrokes and steal your private data.

Viruses, worms, Trojan horses - Your computer files can be destroyed; hackers can gain control over your computer, and viruses can quickly spread to other computers

Hackers - Hackers can access your PC
without your knowledge to steal your private data or use your computer for their own purposes

Identity thieves - Thieves can steal your credit-card number, banking passwords, and more, costing you thousands of dollars

Phishing scams - Replying to a phishing scam can cause you to unknowingly provide criminals with your personal inancial information

Sexual predators - Minors providing strangers with too much personal information in chat rooms, IM sessions, and elsewhere

Privacy intrusions - Marketers and others can learn about your online habits, subjecting you to more pop-ups, identity theft is a possibility

Spam - Your inbox ills up with useless, annoying, even pornographic junk e-mail messages

Instant messaging monitoring & spam - Outsiders can spy on your conversations, send spam and more

Wireless network hackers - Hackers can log your keystrokes, steal your private data, direct you to fraudulent Web sites, and more

Klite codec - codec List for V3.8.0

K-Lite Codec Pack Full
Contents of version 3.8.0:

Player:

* Media Player Classic [version 6.4.9.1 rev. 40]

ffdshow:

* ffdshow [revision 1872]
* ffdshow VFW interface
* extra plugins

DirectShow video decoding filters:

* XviD [version 1.2.0-dev build 2008-01-10]
* DivX [version 6.8.0.0]
* On2 VP6 [version 6.4.2.0]
* On2 VP7 [version 7.0.10.0]
* MPEG-2 (Cyberlink) [version 8.1.0.1317]
* MPEG-2 (Gabest) [version 1.0.0.4]
* MPEG-1 (MainConcept) [version 1.0.0.78]

DirectShow audio decoding filters:

* AC3/DTS/LPCM/MP1/MP2 (AC3Filter) [version 1.46]
* Vorbis (CoreVorbis) [version 1.1.0.79]
* AAC (CoreAAC) [version 1.2.0.575]

DirectShow audio parsers:

* MusePack (MONOGRAM) [version 0.9.1.2 | 0.3.1.2]
* WavPack (CoreWavPack) [version 1.1.1]
* FLAC (madFLAC) [version 1.7]
* Monkey's Audio (DCoder) [version 1.0]
* OptimFROG (RadLight) [version 1.0.0.1]
* DC-Bass Source [version 1.1.0.0]
* AC3/DTS Source (AC3File) [version 0.5b]
* AMR (MONOGRAM) [version 0.9.0.1]

DirectShow source filters:

* AVI splitter (Gabest) [version 1.0.0.9]
* AVI splitter (Haali Media Splitter) [version 1.7.401.3]
* MP4 splitter (Haali Media Splitter) [version 1.7.401.3]
* MP4 splitter (Gabest) [version 1.0.0.4]
* Matroska splitter (Haali Media Splitter) [version 1.7.401.3]
* Matroska splitter (Gabest) [version 1.0.3.0]
* Ogg splitter (Haali Media Splitter) [version 1.7.401.3]
* Ogg splitter (Gabest) [version 1.0.0.1]
* MPEG PS/TS splitter (Gabest) [version 1.0.0.4]
* MPEG PS/TS splitter (Haali Media Splitter) [version 1.7.401.3]
* FLV splitter (Gabest) [version 1.0.0.4]
* CDDA Reader (Gabest) [version 1.0.0.2]
* CDXA Reader (Gabest) [version 1.0.0.2]

DirectShow subtitle filter:

* DirectVobSub (a.k.a. VSFilter) [version 2.38]
* DirectVobSub (a.k.a. VSFilter) [version 2.33]

Other filters:

* Haali Video Renderer [version 1.7.401.3]

VFW video codecs:

* XviD [version 1.2.0-dev build 2008-01-10]
* DivX Pro [version 6.8.0.14]
* x264 [revision 736bm]
* On2 VP6 [version 6.4.2.0]
* On2 VP7 [version 7.0.10.0]
* Intel Indeo 4 [version 4.51.16.2]
* Intel Indeo 5 [version 5.2562.15.54]
* Intel I.263 [version 2.55.1.16]
* huffyuv [version 2.1.1 CCE Patch 0.2.5]
* I420 (Helix) [version 1.2]
* YV12 (Helix) [version 1.2]

ACM audio codecs:

* MP3 (Fraunhofer) [version 3.4.0.0]
* MP3 (LAME) [version 3.97]
* AC3ACM [version 1.4]
* Vorbis [version 0.0.3.6]
* DivX ;) Audio [version 4.2.0.0]

Tools:

* Codec Tweak Tool [version 2.2.5]
* GSpot Codec Information Appliance [version 2.70a]
* MediaInfo Lite [version 0.7.5.9]
* VobSubStrip [version 0.11]
* GraphEdit [build 061102]
* Haali Muxer [version 1.7.359.22]
* FourCC Changer
* Bitrate Calculator

NTFS vs FAT

Criteria	NTFS5	NTFS	FAT32	FAT16	FAT12
Operting System	Windows 2000 Windows XP Windows 2003 Server	Windows NT Windows 2000 Windows XP Windows 2003 Server	DOS v7 and higher Windows 98 Windows ME Windows 2000 Windows XP	DOS All versions of Microsoft Windows	DOS All versions of Microsoft Windows
Limitations
Max Volume Size	2TB	2TB	32GB for all OS. 2TB for some OS	2GB for all OS. 4GB for some OS	16MB
Max Files on Volume	Nearly Unlimited	Nearly Unlimited	4194304	65536
Max File Size	Limit Only by Volume Size	Limit Only by Volume Size	4GB minus 2 Bytes	2GB (Limit Only by Volume Size)	16MB (Limit Only by Volume Size)
Max Clusters Number	Nearly Unlimited	Nearly Unlimited	4177918	65520	4080
Max File Name Length	Up to 255	Up to 255	Up to 255	Standard - 8.3 Extended - up to 255	Up to 254
File System Features
Unicode File Names	Unicode Character Set	Unicode Character Set	System Character Set	System Character Set	System Character Set
System Records Mirror	MFT Mirror File	MFT Mirror File	Second Copy of FAT	Second Copy of FAT	Second Copy of FAT
Boot Sector Location	First and Last Sectors	First and Last Sectors	First Sector and Copy in Sector #6	First Sector	First Sector
File Attributes	Standard and Custom	Standard and Custom	Standard Set	Standard Set	Standard Set
Alternate Streams	Yes	Yes	No	No	No
Compression	Yes	Yes	No	No	No
Encryption	Yes	No	No	No	No
Object Permissions	Yes	Yes	No	No	No
Disk Quotas	Yes	No	No	No	No
Sparse Files	Yes	No	No	No	No
Reparse Points	Yes	No	No	No	No
Volume Mount Points	Yes	No	No	No	No
Overall Performance
Built-In Security	Yes	Yes	No	No	No
Recoverability	Yes	Yes	No	No	No
Performance	Low on small volumes High on Large	Low on small volumes High on Large	High on small volumes Low on large	Highest on small volumes Low on large	High
Disk Space Economy	Max	Max	Average	Minimal on large volumes	Max
Fault Tolerance	Max	Max	Minimal	Average	Average

Enable / Disable Task Manager in Windows XP

• Click Start
• Click Run
• Enter gpedit.msc in the Open box and click OK
• In the Group Policy settings window
  • Select User Configuration
  • Select Administrative Templates
  • Select System
  • Select Ctrl+Alt+Delete options
  • Select Remove Task Manager
  • Double-click the Remove Task Manager option

or you can set by expert way

Hive: HKEY_CURRENT_USER
Key: Software\Microsoft\Windows\CurrentVersion\Policies\System
Name: DisableTaskMgr
Type: REG_DWORD
Value: 1=Enablethis key, that is DISABLE TaskManager
Value: 0=Disablethis key, that is Don't Disable, Enable TaskManager