Comments on: Orkut Is Banned – Heap41a – win32.USBworm Removal

By: tayyab ali

tayyab ali — Sat, 21 Mar 2009 19:51:39 +0000

Hi!
I tried doing that. But the problem still remains.
I am able to change the status to “Show hidden files and folders” and apply the changes. But it doesn’t save it.
So next time when I open Folder Option, its again “Do not show hidden files and folders”.tayyab ali

By: harish

harish — Sat, 03 Jan 2009 09:29:09 +0000

hi,
a similar problem is peeving me a lot since many days.

here i want to present my suffering from “THB VIRUS”
2 months back, my system got attacked from “JAMMER WORM” which is sent from orkut. every time when i try to open mozilla, or orkut or you tube, a message is triggering saying that “orkut(youtube) is sending dangerous virus to ur system. please close the window to stop the virus being entering in ur computer”

when i closed the window, then after, the hidden files option is disappearing and the icon of my C: drive is changing. the name of the drive also got changed to “$@thb&$”.

in order to get rid of this, one of my friends suggested me COMBOFIX antivirus software. it ran succesfully and removed the worm. but after some days, it is attacking again and again.

note: its not happening after each and every reboot.

for some days the system is working fine. this worm is attacking even if i dont open orkut for that matter.

i dont know how is it attacking the system and how is it re entering into the system.

please try to resolve my problem.

i want to attach the log report of the combofix antivirus that scanned my computer. but dont know how to do this. kindly help me out.

-thanks,
harish m v

By: rajesh

rajesh — Sat, 11 Oct 2008 15:30:49 +0000

cool think u will help more

By: lipak ranjan

lipak ranjan — Sun, 13 Jul 2008 09:09:54 +0000

type orkut.com ,if that mssg come then open the task manager and end task the orkut block mssg.then close task manager and open orkut again,it will open until u do not restart computer,after reststing the mssg will come again,then do the the same,any problem mail me

By: Sanix

Sanix — Sun, 06 Jul 2008 19:01:29 +0000

UTP, thanks for the comment. It is interesting to note that the author disabled mozilla firefox because he couldn’t read the edit fields through autohotkeys. This little worm has been created in autohotkeys

By: UTP

UTP — Sun, 06 Jul 2008 14:54:20 +0000

WOW…so orkut and mozilla are definitely famous now…if worms and viruses have started attacking them….

I think that is a good thing…Google deserves to get their software hacked as well…why only Internet Explorer and windows….heheh…