This worm/virus is doing the rounds and it comes through pen-drives. You may not be able to access Orkut and Youtube as well, you will probably get a message like "Orkut is banned, you fool, hahahaha" or "Youtube is banned, you fool, hahahaha".
To remove this worm just follow the following steps :
(1) Press the keys CTRL, ALT & DEL simultaneously to bring up the Task Manager
(2) Click on the "Processes" tab.
Look for svchost.exe under the image name.
There will be many but look for the ones which have your username (what you login with) under the username.
Press the DEL key to kill these processes. It will give you a warning, Click on the "Yes" button.
Look for more svchost.exe files with your username and repeat. Do not kill svchost.exe with SYSTEM, LOCAL SERVICE or NETWORK SERVICE as user name.
(3) Next, click on "My
In the address bar, type C:\heap41a and press enter. It is a hidden folder, and hence not visible if you try to view folders under C:\
Press "CTRL" and "A" keys simultaneously to select all the files in the folder.
Press the 'DEL' key - this will delete all the files selected.
(4)
In the menu, click on "Edit", then click on "Find".
Type “heap41a” without the quotes and press the "Enter" key.
You will see something like this “[winlogon] C:\heap41a\svchost.exe C:\heap(a number)\std.txt”
Select that by clicking on it and press the DEL key.
It will ask “Are you sure you want to delete this value”, click on 'Yes" button.
Close the registry editor.
The virus will have gone from your PC now.
(5)
