Orkut is banned, Youtube is banned virus - how to remove it
Some guys here are really pissed off by a message that popped up each time they tried to access orkut, youtube or even myspace through their browsers. These guys started asking “if the Orkut is banned?” or “is Youtube banned?” and other such types of questions on forums, discussion boards, yahoo answers, etc. Now, is orkut really banned?
The pop up message which exactly looks something like “Orkut is banned you fool, The administrators didn’t write this program guess who did?? MUHAHAHA!!” or something like “Youtube is banned you fool, The administrators didn’t write this program guess who did?? MUHAHAHA!!” Technically, this message is caused by a computer worm called W32.USBWorm (or a few variants of the same). This worm mostly spread from one computer to another when you insert a USB drive, like a pen drive, a flash drive or even a cell phone memory card.
Now, how can you remove this worm?
This Orkut or Youtube worm generally places itself in a hidden folder named heap41a in your C drive (or your Windows drive). You can directly access this folder by typing C:\heap41a into your Run command box. You will see a variety of files, including Svchost, Script1, Reproduce, etc.
To remove the worm, select all these files (except one file named Svchost); and delete them (Shift + Del). Now go to your registry editor (Run > regedit) and Go to HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows > CurrentVersion > policies > Explorer > Run. On the right hand side, you should see winlogon key value set. Right click on it and delete it. (Note: In some computers, you may find the same at HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows > CurrentVersion > Run).
Now, restart your computer. Once you have restarted, go to Run and type C:\heap41a. You will see the svchost file. If you see any other files, select all and delete them. Remove it from the recycle bin as well (Ctrl + Del).
Now, open your browser and log on to www.orkut.com or www.youtube.com. Voila! you got it right!
Note: The same USB worm also causes a peculiar firefox problem. When you try to install a new version of firefox or when you try to open it up, you will get an error message something like “I DNT HATE MOZILLA BUT USE IE OR ELSE…“. This maybe called a “Use Internet Explorer you dope” problem. So, you have just solved this problem as well. Enjoy.
11 Comments
Comments RSS TrackBack Identifier URI
Leave a comment
Thanks, but I am not able to find any heap41a folder into my C drive. I tried “show hidden files” as well but not working..please help.
Thank you, it’s ok for me. To find heap41a, use your run command box.
thank you so much…finally my problem has resolved
I have followed you instructions.
1) Delete all files except svchost.
2) I have removed winlogon from the reg.
3) I??????????????????????????
????????????????????????????????????????????????
___________________________________
std.txt x
—————————————————-
The script file “c:\heap41a\std.txt”
does not exist. Creat it now?”
——– ——-
I Yes I I No I
——– ——–
___________________________________
i have selected no.
when I restart the computer. The same dialog box appears
But I???????????????????????????????????
????????????
sorry..
3) I have checked the recycle bin
But when I restart the computer.. the following dialogbox appears.
But i can reach www.youtube.com now.
Please help . Thank you.
I did the regedit again.
This time the problem is solved.
Many thanks
it helps… it helps so much… the last time i had to re-format everything and thats a headache…
thank you so much
cheers!
Thanks! I couldn’t see utube suddenly after i moved to london. I think it’s from my friends who gave me some files with their usb drives. Now i solved this problem! THANKS!!!
[…] but a virus and you can easily remove it from your computer, even without an anti-virus. Here is quick solution to this problem. This Orkut or Youtube worm generally places itself in a hidden folder named […]
Thank u, Thank u so much,
honestly your helped,has destroyed this madness swindler virus (the creatorr), he only use his knowledge to make people in pain. Alas u come .
Thank u Again , may god bless u
Your blog is interesting!
Keep up the good work!