The next time you get the message :“Orkut is banned you fool, The administrators didnt write this program guess who did?? MUHAHAHA!!” don't panic. Remove it by using the steps I mention in this article
MUHAHAHA!! is a W32.USBWorm virus which displays such messages while opening Orkut and Youtube.The very first step: Open the Task Manager by pressing Ctrl + Alt + Del and go to processes tab .
Step2
Locate svchost.exe under the image name. There will be many processes by that name but look for the ones which have your username under the username.
Step3
Just kill these processes by pressing Del key.Only kill those which have your username under the username and leave the rest
Step4
Open the run command and type C:\heap41a and press enter. This is a hidden folder. Delete all the contents of this folder.
Step5
Open the registry by typing regedit in the run box. Search for heap41a in the registry by using the find command
Step6
You will get something like this “[winlogon] C:\heap41a\svchost.exe C:\heap(some number)\std.txt“. Just delete the entries by pressing the del key.
Step7
Close the registry editor. Now the virus will be gone.
Tips & Warnings
The virus mainly spreads through USB disks so be sure to delete Autorun.inf file and any folder which has a .exe extension in the pen drive you use.Avast and Nod32 are able to detect it but not AVG or Norton.
The above mentioned steps are not guaranteed to work everytime. the virus may disable the Task Manager and registry editor also so as to stop you from performing the above steps.
The virus also spreads quickly through Flash drives and Local Area Network. So, always scan the flash disks in such cases.