'DNT HATE MOZILLA BUT USE IE OR ELSE' Error - Mozilla Issue
This is the second time that I got the attack from the Worm called w32.USBworm .Its a new worm which gets propagated from USB drives.Once the drive is infected it infect the machines which auto plays the USB drive .
You can find whether your machine is infected when you get a message box saying I “DNT HATE MOZILLA BUT USE IE OR ELSE… ” with the messagebox title “USE INTERNET EXPLORER YOU DOPE” .It will also ban you in accessing orkut and you tube website.
Solution ::
The machine will have a hidden folder c:\heap41a. The folder will have some files which includes the script files which is running and creating the issues (invoking the message boxes too) .
Start the XP machine is safe mode. Run regedit .Change the following setting to 2 from 1 . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\
Folder\Hidden\SHOWALL .This is done because some of the machines don’t show the folder.
Next delete the folder c:\heap41a .
Now clear all the entries which has heap41a in it , in the registry directory HKEY_LOCAL_MACHINE,SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run .
Now your machine is 100% clean from the infection. Be cautious the next time you use the infected USB drive .We can hope a tool to solve this issue soon …
The things that I have done with my USB stick is , I disable the autoplay for all drives in my PC .You can do it by Run > gpedit.msc .Go to Computer Configuration > Click “Administrative Templates” > Click “System” > Double-Click “Turn off Autoplay”
Change it to all drives .Now the USB drive is safe for that machine .Also delete the extra files created in the USB drive if any.
You can find whether your machine is infected when you get a message box saying I “DNT HATE MOZILLA BUT USE IE OR ELSE… ” with the messagebox title “USE INTERNET EXPLORER YOU DOPE” .It will also ban you in accessing orkut and you tube website.
Solution ::
The machine will have a hidden folder c:\heap41a. The folder will have some files which includes the script files which is running and creating the issues (invoking the message boxes too) .
Start the XP machine is safe mode. Run regedit .Change the following setting to 2 from 1 . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\
Folder\Hidden\SHOWALL .This is done because some of the machines don’t show the folder.
Next delete the folder c:\heap41a .
Now clear all the entries which has heap41a in it , in the registry directory HKEY_LOCAL_MACHINE,SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run .
Now your machine is 100% clean from the infection. Be cautious the next time you use the infected USB drive .We can hope a tool to solve this issue soon …
The things that I have done with my USB stick is , I disable the autoplay for all drives in my PC .You can do it by Run > gpedit.msc .Go to Computer Configuration > Click “Administrative Templates” > Click “System” > Double-Click “Turn off Autoplay”
Change it to all drives .Now the USB drive is safe for that machine .Also delete the extra files created in the USB drive if any.

1 Comments:
In my computer default value 2 only,still I am not able to view hidden files! (loged in normal mode not in safe mode)
Post a Comment
Subscribe to Post Comments [Atom]
<< Home