Friday, January 11, 2008

I DNT HATE MOZILLA BUT USE IE OR ELSE

Hai frinds,

I have read this from one of the blogsites.

suffering from virus

"I DNT HATE MOZILLA BUT USE IE OR ELSE"

W32.USBWorm spreads through USB drives. Prevents user from using Firefox, shows message which reads, "I DNT HATE MOZILLA BUT USE IE OR ELSE..." The message header reads, "USE INTERNET EXPLORER YOU DOPE." Firefox is then closed by force. Also blocks "Orkut" and "YouTube" sites.

There are two steps in order to rectify the solution:

1.

a) Click alt+ctl+del select TaskManager-> go to process tab

b) Delete SVCHost.exe with the perticular userLogin

c) Go to c:\heap41a. There are the files which are causing the problem will appear. Delete the files.

Hurray! No virus now.


2.

Careful when doing this..

a) Go to start->Run

b) type regedit and click ok.

c)10. Go to the menu Edit --> Find

d) Type "heap41a" here and press enter. You will get something like this "[winlogon] C:\heap41a\svchost.exe C:\heap(some number)\std.txt"

e) Select that and Press DEL. It will ask "Are you sure you wanna delete this value", click Yes

f) Now close the registry editor.


Now the virus is gone. But be sure to delete the autorun.inf file and any folder whose name ends with .exe in the pen drive.

Some reported that after this fix they were not able to see their Hidden folders and files if you have that issue try the folowing

a. Go to REGEDIT

b.[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

c. set the DWORD "NoFolderOptions" to 0 or just delete it..

Try the following links also

http://www.freewebs.com/mgsujith/worm/remove.html

http://www.jeba.in/posts/w32usbworm-lets-remove-this-worm-manually/

http://mgharish.blogspot.com/2007/05/i-dnt-hate-mozilla-orkut-is-banned.html