Many people are facing a common problem, where Orkut.com, Youtube.com and Firefox are blocked in their systems and they get following error with a scary laugh:
Orkut IS BANNED, orkut is banned you fool The administrators didnt write this program guess who did?? r r MUHAHAHA!!
So here I'm posting a detailed procedure to solve this problem.
It happens bcoz of "Heap41a / win32.USBworm" which spreads through USB pen drives and removable storage devices. I'll tell you manual as well as automatic method to remove the virus:
-------------------------
A. MANUAL METHOD:
Follow these instructions:
1. Open "Task Manager" and goto "Processes" tab.
2. Look for services with name "svchost.exe". There will be many services with the same name. Most of them will have "SYSTEM", "LOCAL SERVICE" OR "NETWORK SERVICE" as User Name but you have to look for "svchost.exe" service which has your currently logged in username as User Name.
3. You'll get approx. 2 services with the name "svchost.exe" which has your Windows username. End Task them by pressing <Delete> key or by selecting them and clicking on "End Process" button. It'll confirm the action, accept it.
4. Now open "regedit" from RUN and goto following keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Policies\Explorer\Run
And look for a key in right-side pane with the name "Winlogon" which will have "heap41a\svchost.exe" in its value field. If you find this key, delete it.
5. Now goto following key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\explorer\Advanced\Folder\Hidden\SHOWALL
And in right-side pane, change value of "CheckedValue" to 1
6. Now enable "Show Hidden Files/Folders" option in "Tools -> Folder Options" in My Computer.
7. Right-click on Start button and select "Open". Now open "Programs" folder, here you'll see a folder "Startup". Open it and if you get a hidden file there, delete it. If its not there, then close it.
8. At last open "My Computer" and open C: drive. Disable "Hide Protected System files" option in "Tools -> Folder Options". You'll see a folder "heap41a" in C: drive. Delete it.
Thats it. After doing all this, restart your system and you'll get rid of the virus.
-------------------------
B. AUTOMATIC METHOD:
Just download following tool and run it:
Download Orkut blocking Worm Removal tool
-------------------------
Don't forget to format your pen drive or removable storage media which caused this virus infection coz it would still contain the virus. If you don't want to format it, then delete following 2 files from pen drive:
microsoftpowerpoint.exe
autorun.inf
This article was posted in Mozilla Firefox, Others, Troubleshooting.
Related Articles
Popular Articles
- Frequently Asked Problems with Solutions
- Is Your System Infected with a Virus / Spyware / Adware / Trojan?
- Transform Windows Vista into 7 without using Customization pack
- Transform Windows XP into 7 without using Customization pack
- Transform Windows XP into Vista without using Customization pack
- All About Resource Hacker in a brief Tutorial
- Master Tutorial to Make Your Windows 7 Super Fast
- Master Tutorial to Make Your Windows Vista Super Fast
- Master Tutorial to Make Your Windows XP Super Fast
- All Kinds of Restrictions for Windows XP, Vista and 7
Sora
Here is the screenshot
I really hope there is a solution to this problem
http://img379.imageshack.us/img379/8238/newbitmapimagehf1.png
VG
^^ Try to update the Flash player version. Also try the new beta player in youtube.
Sora
i have checked my flash player version and its up to date and when i try the new beta player it comes out "sorry this video is no longer available"...maybe because i installed google web accelerator and flashget recently
VG
^^ Try to uninstall your browser completely and then reinstall it. After reinstallation install a fresh Flash player. Now it should help.
Sora
it works thanks for your advice
jyoti
sir i hv been facing this problem in win 2000 NT in which i am not able access website orkut and gmail (displaying message website not available) also msconfig is not accessible. i have formatted my c drive too the problem still exixts.......is this any kind of trojan or virus pls help.............thanx
VG
^^ Have you followed the above mentioned steps? If it didnt work, then I'll advise you to follow steps given here:
http://www.askvg.com/is-your-system-infected-with-a-virus-spyware-adware-trojan/
Priya Singhal
Hey vishal... can u pls teach me the trick to hack gmail id?? i really wanna crack my boyfriend's id. i m very much sure that he is cheating on me. i just wanna confirm.
Pls vishal. pls do it for me if u can...pls
Suma
Hi
Orkut & all the emailing stuffs are blocked in my office using Websense , How can i use my Orkut here none of the Proxy works :
VG
^^ Then its not possible if your office admin has disabled it.