Heap41a

Heap41A
Heap41A is a harmful worm that spreads by dropping itself and an autorun.inf file to all USB devices that are attached to the system. This will ensure that it is executed whenever the device is plugged into another computer. It then goes about blocking Mozilla, YouTube and Orkut, all the while laughing at you. If possible, it is reccomended to drop the worm as soon as possible.
Discussions about Heap41A
You can find discussions about everything related to this wiki on
Read more
" Dumaru is a mass mailer worm that installs a remote control and keylogger...
- http://malware.wikia.com/wiki/Dumaru
" Conficker, also known as Downadup or Kido, is a worm that gained a great deal of...
- http://malware.wikia.com/wiki/Conficker
" It would spread over IRC, however this routine has long since stopped working...
- http://malware.wikia.com/wiki/Fagot
=[ C:\Heap41a ] * Prank Remover * =
Symptoms: You are being annoyed by the following messages
Message displayed when Win32/Muhu terminates Orkut
Message displayed when Win32/Muhu terminates "Mozilla Firefox"
Message displayed when Win32/Muhu closes Web browser visiting the site 'youtube'
Solution:
If you are reading this from the prank-hit machine:
[*:1bcsruaj]1) Open Windows Explorer and type C:\Heap41a ( in address bar ) and press enter. ( You will be browsing the hidden folder ).
[*:1bcsruaj]2) You will have to save this file :arrow: AutoHotkey.INI ( 651 bytes ) to the above folder.
[*:1bcsruaj]3) Go back to Windows Explorer and double click svchost.exe to execute.
[*:1bcsruaj]4) You will be happy to see a message box, press Ok and then in Windows Explorer, press BackSpace to browse C:\.
[*:1bcsruaj]5) Delete C:\Heap41a folder.
That is it!... :idea:

Quote
Note1: The offending prank also meddles with Windows Explorer > Tools > Folder Option > Do not show hidden files and folders.
You will have to set your preference on your own.
Note2: If you have to download / save and use this autohotkey.ini from a removeable drive, be informed that the offending prank might get copied to the removeable drive.
Check its root and delete any microsoftpowerpoint.exe that might be on it.
Thanks: http://forums.mozill...ic.php?t=542798

Visit us at the website: http://www.autohotkey.com/board/topic/21447-cheap41a-prank-remover and hope you see you soon!
 
< Prev   Next >