banti said:
I am facing problem in opening Arkut (Google) and even YouTube.
Whenever I tried to open the Arkut, the internet explorer goes off and
a message like "Arkut is banned you fool !!! Your adminstrator did not
write the program, guess who did !!! MUHAHAHA!!!" Please clarify how
to get rid of this..
The explanation here, gives the name of the malware as W32/AHKHeap.
http://wiki.answers.com/Q/Orkut_be_banned_or_not
There is an answer here of sorts - use at your own risk.
http://www.thinkdigit.com/forum/archive/index.php/t-63689.html
" 1. Press CTRL+ALT+DEL and go to the processes tab
2. Look for svchost.exe under the image name. There will be many but
look for the ones which have your username under the username
3. Press DEL to kill these files. It will give you a warning, Press Yes
4. Repeat for more svchost.exe files with your username and repeat.
Do not kill svchost.exe with system, local service or network service!
5. Now open My Computer
6. In the address bar, type C:\heap41a and press enter. It is a hidden
folder, and is not visible by default.
7. Delete all the files here
8. Now go to Start --> Run and type Regedit
9. Go to the menu Edit --> Find
10. Type "heap41a" here and press enter. You will get something like this
"[winlogon] C:\heap41a\svchost.exe C:\heap(some number)\std.txt"
11. Select that and Press DEL. It will ask "Are you sure you wanna
delete this value", click Yes
12. Now close the registry editor.
Now the virus is gone. But be sure to delete the autorun.inf file
and any folder whose name ends with .exe in the pen drive.
and the microsoftpowerpoint.exe ll be stored in temp folder
also search for the same and delete all.
to remove it in pen drive insert it into a linux machine and
delete the folder."
There are web sites, like Castlecops, that specialize in helping
people remove malware, and you could take your problem there to
get help. You may have more than one piece of malware present
on the computer.
http://www.castlecops.com/t49266-I_think_I_have_a_virus_how_do_I_get_help.html
http://www.castlecops.com/f67-Trend_Micro_HijackThis_Logs.html
http://www.castlecops.com/t213297-How_to_Be_READY.html
HTH,
Paul
