Thursday, December 27, 2007

Is Mozilla is banned Orkut is banned on your system?



Are you facing these Messages when you open your Mozilla firefox or when you open your Orkut Home page?

"I DNT HATE MOZILLA BUT USE IE OR ELSE..."

"USE INTERNET EXPLORER U DOPE"

"Orkut is banned you fool, The administrators didnt write this program guess who did?? MUHAHAHA!!" with a caption ORKUT IS BANNED

Have you been wondering how these messages pop up when I open my mozilla firefox, if you are looking for the solution to disable Orkut at home or at school then you are at the right place.
Well, before describing this you must know how did u get this? Its simply a w32.USB worm It spreads by inserting a pen drive or anything into the USB in which your w32.USB worm is dumped

Manual steps for removing the Virus

1.Open Task Manager by pressing CTRL+ALT+DEL and select Processes tab

2. Search for "svchost.exe" below the image file name. There will be many files with same name but look for the one which have your "Username" and "Password"

3. Delete these files by pressing delete. It will give display a warning, Press Ok

4. Search for more svchost.exe with your username and delete it. Don't Ever try to kill svchost.exe with names local, network service and local service.

5. Open "My Computer"

6. Type C:\heap41a in the adress bar and press enter. a Hidden folder will be displayed, and is not visible by default. Delete all the files here

7. Hold "windows key + r" and type "Regedit"

9. Go to Edit Menu>> Find>>type "heap41a" and press enter

10."[winlogon] C:\heap41a\svchost.exe C:\heap(some number)\std.txt" will be displayed, delete these files and a window will pop up askin you "Are you sure you want to delete this value?" clik Ok. and close the registry editor window.

Virus will be deleted by following these steps, deltete the autorun.inf file and any .exe file in the pendrive.

0 comments: