orkut banned | youtube banned | firefox banned – solution

Many people are facing a common problem, where Orkut.com, Youtube.com and Firefox are blocked in their systems and they get following error with a scary laugh:



“Orkut is banned you fool, The administrators didnt write this program guess who did?? MUHAHAHA!!” with title ORKUT IS BANNED

So here I’m posting a detailed procedure to solve this problem.

It happens bcoz of “Heap41a / win32.USBworm” which spreads through USB pen drives and removable storage devices.

Follow these instructions:

1. Open “Task Manager” and then go to “Processes” tab.

2. Look for services with name “svchost.exe”. There will be many services with the same name. Most of them will have “SYSTEM”, “LOCAL SERVICE”” OR “NETWORK SERVICE” as User Name but you have to look for “svchost.exe” service which has your currently logged in username as User Name.

3. You’ll get approx. 2 services with the name “svchost.exe” which has your Windows username. End Task them by pressing key or by selecting them and clicking on “End Process” button. It’ll confirm the action, accept it.

4. Now open “regedit” from RUN and goto following keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Policies\Explorer\Run

And look for a key in right-side pane with the name “Winlogon” which will have “heap41a\svchost.exe” in its value field. If you find this key, delete it.

5. Now goto following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\explorer\Advanced\Folder\Hidden\SHOWALL

And in right-side pane, change value of “CheckedValue” to 1

6. Now enable “Show Hidden Files/Folders” option in “Tools -> Folder Options” in My Computer.

7. Right-click on Start button and select “Open“. Now open “Programs” folder, here you’ll see a folder “Startup“. Open it and if you get a hidden file there, delete it. If its not there, then close it.

8. At last open “My Computer” and open C: drive. Disable “Hide Protected System files” option in “Tools -> Folder Options“. You’ll see a folder “heap41a” in C: drive. Delete it.

Thats it. After doing all this, restart your system and you’ll get rid of the virus.

Did you find this article useful -

Filed under Google. Posted by Abhishek on 6th March 2012.

Leave a Comment:

Your email address will not be published. Required fields are marked *


Use a proxy..i use pagemod.com proxies..their new domain is http://www.smod.info …secure tunnel at
https://www.blackdile.com ..a also their new domain alert via email is also effective..they have fastPHP proxy and
fully functional CGI proxy and also a Virtual Private Desktop proxy which gives access to all sites for free.

Get Google Updates

Every Sunday, we send out "Google This Week" newsletter which covers all the latest and important updates from Google. First, we curate information from authentic and verified sources and then write the newsletter in an easy to understand format with images and summary for each update. View Sample ›

Join 9000+ subscribers following their favorite company in a simpler and easier way. Join Now ›