Expert: Brian Benosky - 4/16/2008

Question
what is a funny ust virus

Answer
Hi Reggie

Funny UST Scandal.avi.exe is another name for W32/Sdbot-DIQ.  According to Sophos, it is a worm for the Windows platform.

When first run W32/Sdbot-DIQ copies itself to:

<Root>\Funny UST Scandal.avi.exe
<Windows>\Funny UST Scandal.exe
<Windows>\xmss.exe
<Root>\xmss.exe

The worm creates the following files:

<Root>\autorun.inf
<Windows>\autorun.inf

If you think you are infected, please download TrendMicro HijackThis! from the following link:
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe
* Save HJTInstall.exe to your desktop.
* Doubleclick on the HJTInstall.exe icon on your desktop.
* By default it will install to C:\Program Files\Trend Micro\HijackThis.
* Click on Install.
* It will create a HijackThis icon on the desktop.
* Once installed, it will launch Hijackthis.
* Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
* Click on "Edit > Select All" then click on "Edit > Copy" and Paste the entire contents of the log (no attachments) into a follow-up here and I will analyze the log and advise you further.

Brian