Remove Yusufali.b. Description and removal instructions

Title: Yusufali.b
Type: Worms	Severity scale: (45 / 100)

Yusufali.b is a worm that spreads through floppy disks in infected executables. The parasite is designed to silently run in background and monitor user activity analyzing titles of opened windows. If one of the titles contains specific words, the trojan displays the following message:

"vav vay Sex chera !!!
Aoozo bellahe mena SHAITAN rajim..."

Then Yusufali.b shows another message with the "For Exit Click Here" button. After the user moves the mouse, the worm opens yet another message: "OH! NO i'm in the Cage". This message contains three buttons "LogOff", "ShutDown", "Restart". Clicking on any of them leads to a log off. The mouse pointer is locked within the message, so the user is left with no choice but to log off, restart or turn off a computer. Yusufali.b automatically runs on every Windows startup.

FORUM:
Discuss Yusufali.b in
spyware removal forum

Yusufali.b properties:
• Hides from the user
• Stays resident in background

Automatic Yusufali.b removal:

remover for Yusufali.b

Yusufali.b manual removal:

Kill processes:
systemdll.exe, documents.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\system4224411=%System%\systemdll.exe

HELP:
how to remove registry entries

Delete files:
systemdll.exe, documents.exe

HELP:
how to remove harmful files

Misc:
documents.exe is an infected executable, which Yusufali.b copies on each floppy disk.

The systemdll.exe file can be found in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.

Other programs to remove Yusufali.b:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 14/11/05
Information updated: 14/11/05

Additional resources related to Yusufali.b:

Attention: If you know or you have a website or page about Yusufali.b removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Yusufali.b parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.