Monday, May 21, 2007

'DNT HATE MOZILLA BUT USE IE OR ELSE' Error - Mozilla Issue

This is the second time that I got the attack from the Worm called w32.USBworm .Its a new worm which gets propagated from USB drives.Once the drive is infected it infect the machines which auto plays the USB drive .
You can find whether your machine is infected when you get a message box saying I “DNT HATE MOZILLA BUT USE IE OR ELSE… ” with the messagebox title “USE INTERNET EXPLORER YOU DOPE” .It will also ban you in accessing orkut and you tube website.
Solution ::
The machine will have a hidden folder c:\heap41a. The folder will have some files which includes the script files which is running and creating the issues (invoking the message boxes too) .
Start the XP machine is safe mode. Run regedit .Change the following setting to 2 from 1 . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\
Folder\Hidden\SHOWALL .This is done because some of the machines don’t show the folder.
Next delete the folder c:\heap41a .
Now clear all the entries which has heap41a in it , in the registry directory HKEY_LOCAL_MACHINE,SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run .
Now your machine is 100% clean from the infection. Be cautious the next time you use the infected USB drive .We can hope a tool to solve this issue soon …
The things that I have done with my USB stick is , I disable the autoplay for all drives in my PC .You can do it by Run > gpedit.msc .Go to Computer Configuration > Click “Administrative Templates” > Click “System” > Double-Click “Turn off Autoplay”
Change it to all drives .Now the USB drive is safe for that machine .Also delete the extra files created in the USB drive if any.

1 Comments:

Anonymous Anonymous said...

In my computer default value 2 only,still I am not able to view hidden files! (loged in normal mode not in safe mode)

2:06 AM  

Post a Comment

Subscribe to Post Comments [Atom]

<< Home