“I DNT HATE MOZILLA BUT USE IE OR ELSE…”
“USE INTERNET EXPLORER U DOPE”
“Orkut is banned you fool, The administrators didnt write this program guess who did?? MUHAHAHA!!” with title ORKUT IS BANNED
So here I’m posting a detailed procedure to solve this problem.
It happens bcoz of “Heap41a / win32.USBworm” which spreads through USB pen drives and removable storage devices.
Follow these instructions:
1. Open “Task Manager” and then go to “Processes” tab.
2. Look for services with name “svchost.exe”. There will be many services with the same name. Most of them will have “SYSTEM”, “LOCAL SERVICE”” OR “NETWORK SERVICE” as User Name but you have to look for “svchost.exe” service which has your currently logged in username as User Name.
3. You’ll get approx. 2 services with the name “svchost.exe” which has your Windows username. End Task them by pressing
4. Now open “regedit” from RUN and goto following keys:
And look for a key in right-side pane with the name “Winlogon” which will have “heap41a\svchost.exe” in its value field. If you find this key, delete it.
5. Now goto following key:
And in right-side pane, change value of “CheckedValue” to 1
6. Now enable “Show Hidden Files/Folders” option in “Tools -> Folder Options” in My Computer.
7. Right-click on Start button and select “Open“. Now open “Programs” folder, here you’ll see a folder “Startup“. Open it and if you get a hidden file there, delete it. If its not there, then close it.
Thats it. After doing all this, restart your system and you’ll get rid of the virus.