Muhaha virus/Orkut virus
The worm name is w32.USBWorm .Nick names Muhaha virus/Orkut virus/I hate FireFox virus
Orkut virus symptoms
“I DNT HATE MOZILLA BUT USE IE OR ELSE…” or “USE INTERNET EXPLORER YOU DOPE or When you tried opening orkut this is the message it popped up ” ORKUT IS BANNED,Orkut is banned you fool`,The administrators didnt write this program guess who did?? ”
Method 1
Start Menu>Run and type regedit . In the Registry Editor browse to this entry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL and in the “Checked all” key reset it back to 1 from 2. Now you can change the settings in the folders option. Now delete the folder C:\heap41a and clear all the key entries from this registry entry HKEY_LOCAL_MACHINE,SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run which says heap41a.
Now the virus infection is removed 100%. Before you are done make sure you format the usb drive( if any you have) it doesn’t infect other systems too.
go to run prompt type cmd there .the dos prompt will open .using cd to change directory cd // to change directory to to dir-name , dir // to view the content of the directory
go to c:/heap41a
then using commands like deltree, del , rmdir delete the dir .. but before that you have to terminate the svchost.exe which running from this dir.
To terminate svchost.exe:-
open task manger by pressing alt+ctrl+del
try opening orkut in our IE and when the pop up comes go to task manager > applications right click and click on go to process . it will tell you which svchost.exe to end.
once it is done you can delete C:\heap41a by using dos commands. The problem will be solved.
Method2
For removal of that… run any anti spyware software for your machine.(Try ccleaner ,it is a freeware, download it from here: http://www.ccleaner.com/)
Or to resolve your problem for temporary press Ctrl + Alt + Del and end the svchost.exe which are not related to any system process Here is the fix for Orkut, Youtube, Fireox Blocker (Heap41a / win32.USBWorm)
This tool can be used to remove the Blocker worm as well as prevent the Worm further to get infected on the same machine.
or take a look here — http://slynux.org/downloads/Worm-fix.exe.zip
Usage Instructions:
1) Download the fix and run on infected machine.
2) It will ask for a re login.
3) After logging again run the fix again. The worm will be removed successfully.
Further reading : http://mgharish.blogspot.com/2007/05/i-dnt-hate-mozilla-orkut-is-banned.html
http://www.whoismadhur.com/2007/11/16/how-to-remove-orkut-is-banned-virus/
http://fivepointsome1.blogspot.com/2007/10/how-to-remove-virus-orkut-is-banned-you.html
Another solution here : You can go to the following link and download the file called "Virus Eater.exe"
Instructions are included http://www.mediafire.com/?fngtk9gndcy
0 comments