Tuesday, February 26, 2008

Fundas on removing "Orkut is banned" svchost.exe and heap41a Virus




Yet another message “ORKUT IS BANNED,Orkut is banned you fool`,The administrators didnt write this program guess who did??`r`r MUHAHAHA!!”

What about www.youtube.com ? That is banned too !!!

It’s just a worm, a virus or a trojan or whatever malicious hacker or craker program or script it is. Wrtitten is VBScript programming labguage by a crazy rascal who deserves to rot in his/her grave for disabling Firefox of all softwares !

How to remove the Orkut and Firefox and Youtube banning virus ?

Simple.

* First press Control-Alt-Delete (Ctrl-Alt-Del is called the three finger exercise in Windows)

* There Click Processes , then click User Name to arrange according to users.

* Now, look for svchost.exe run by User name “user” or “admin” or “your computer name” There will be two of them. Right click and end both the svchost.exe processes where the User Name is NOT “SYSTEM” or “NETWORK SERVICE” or “LOCAL SERVICE” Only where the user name is “USER” or “ADMIN” or “ADMINISTRATOR” or “your name”
* Next Click Start > Run > Type cmd in the box and press enter (Just get the Command Prompt of DOS - C:\windows\system32\cmd.exe)
* There in the black Command Line, type “ cd \ ” and press Enter
* It has to change to C:\>
* Next, type attrib -s -r -h heap41a /s /d and press Enter
* Then Open C: on My computer and delete the folder heap41a ie C:\heap41a
* Then remove C:\heap41a\svchost.exe shortcut from C:\Documents and Settings\USER\Start Menu\Programs\Startup (Or Start > All Programs >Startup)
* That’s all
* Then clean the pen drive

Cleaning the pen drive :

* First make sure that the computer is clean (all viruses have been removed)
* Plug in the pen driv, but make sure YOU DON’T DOUBLE CLICK on the pen drive icon in My Computer
* Open My Computer . Right Click on the pen drive.
* Click Search from the menu that appears ( Auto, Autoplay, Open (O), all belong to the virus and clicking any of them will infect the computer with the virus again.
* In Search All files and folders
* Type ” *.exe ” (without the ” “) in the first box (all or part of the filename)
* Click More advanced options justabove the search button
* Tick Search hidden files and folders
* Click Search button
* In the files that come in the search results, look for files of the Type Application with the icon of a folder
* These .exe files are trying to disguise themselves as folders to fool you into clicking them, so the most probably are viruses !!!
* Delete them (make a backup copy if required) and check the pen drive again.

No comments: