Perfume Factory

Whenever you try to open firefox, a new msgbox will popup onto your screen displaying a msg like “I DNT HATE MOZILLA BUT USE IE OR ELSE…” with the title “USE INTERNET EXPLORER YOU DOPE”. After it terminates the firefox automatically.

The following screenshot describes it best:

Along with firefox, it also prevents you from opening Orkut and Youtube. It gives the alert “Orkut is banned you fool`, The administrators didn’t write this program guess who did?? MUHAHAHA!!” and “youtube is banned you fool`, The administrators didn’t write this program guess who did?? MUHAHAHA!!” and closes the window immediately.

Description

• The name of worm is W32.USBWorm.
• It spreads through USB drives.
• It mainly affects firefox, orkut and youtube. But it doesn’t harm any of your data that is in your computer. Everthing works fine except for firefox, orkut and youtube.
• It also plays a .wav file (which sounds as “muhahaha!!) whenever the pop-up appear

How it works?

• It creates a folder with name heap41a in C drive that will be disguised as system folder with hidden attributes enabled and copies all its contents in that heap41a folder.
• The running process that is responsible for this is svchost.exe and it will be spawned under user name.
• It will make an entry into registry so that it will be started automatically every time the system gets rebooted.

Contents of “heap41a” folder

• Svchost.exe – This is the main executing program.
• Script1.txt – It contains the script for displaying messages and playing sound file depending upon application invoked.
• Std.txt – It is responsible for making registry entries and running svchost.exe.
• Reproduce.txt – It is responsible for reproducing the directory structure and registry entries every time the system reboots or if any files or entries missing.
• Along with these, there will be one audio file and one drive list text which contains by default all alphabets from A…Z

How to remove this worm?

• Terminate svchost process. Remember there will be more than one svchost processes. You have to delete the one which was spawned under user name.
• Delete the heap41a folder from your system. It will be hidden. Use advanced search options to find it. Or directly type “C:heap41a” without qoutes in run ( Ctrl +R ) to open the hidden folder. The other option is to modifying registry entry to show hidden files, goto HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows > CurrentVersion > Explorer > Advanced > Folder > Hidden > SHOWALL, checkedvalue and set this back to 1 which will be 0.
• Remove the following registry entries so that it can not recur. Navigate to HKEY_LOCAL_MACHINE > SOFTWARE > Microsoft > Windows > CurrentVersion > policies > Explorer > Run” and remove the “winlogon” key . This registry entry will be responsible for starting up “C:heap41asvchost.exe” file everytime you start your windows.
• Also remove any of autorun.inf file in your pen drive and a folder with .exe extension. It will be usually with name “New folder”.

It can also be removed using freeware tool “hijackthis” which can be downloaded from here :http://filehippo.com/download_hijackthis/

Note: sometimes, this worm also disables your “taskmanager” and “regedit” to prevent you to from removing it! In such case you can again enable your taskmanager and registry editor by following the instructions that are provided by microsoft. Follow this link for more information, http://support.microsoft.com/kb/555480

1. I am slightly suffering from somnambulism. Sometimes I walk out of my bed but never been out of my bed room. I have this since my childhood and still can’t get out of it.2. I can’t tolerate blood. Whenever I see blood, I will faint. I fainted at high school during frog dissection demonstration. Next time at 12th class zoology practical of “Identifying blood group”. My lecturer had asked me, ‘what will you do if you have to become doctor?’ I said I won’t.

3. I love tea! I love tea!! I love tea!!! I can drink as many times as you want. I have a record of drinking 20 times a day.

4. I am Final Destination Survivor. I escaped from car accident when I was in 2nd standard. I was trying to cross the road without seeing the high speed car coming across me. Driver applied brake immediately otherwise it would have been spot death! Drive got hurt little because of applying sudden brake but I wasn’t. It happened second time also, when I was in 11th standard. I was riding bicycle. Suddenly I slipped out from it and I fell on the middle of road. I was almost at the mouth of bus wheel which was coming opposite to me. Again driver of bus saved me by applying brake!

5. I had never been to L.K.G. I had been directly promoted to U.K.G as I had learnt all those L.K.G stuff before schooling. My neighbor, who was teacher, had taught me.

6. As a child, I wanted to be a Librarian. So that I can read whole library books without spending a single penny on them. (greedy) Rather I would get salary to read!

7. 7 (seven) is my favorite number. I don’t know the reason but I got addicted to it. 4 (four) comes next in the list. Coincidently, my employee no is 74747. Full of 7s and 4s.

Laziness is the word that describes me most and sleeping the 2nd in hit list. About sleeping, I will write about that some other day, some other time.Wiki defines laziness as the lack of desire to perform work or expend effort.

I think thats not really so right definition. One day, some one may come with better definition for laziness, the definition that it really deserves.

Whatever, as far my opinion, laziness is really good thing and it saves your lot of time, energy,…etc etc

If you think laziness is bad thing, check this and this.

Here is one more sibling of laziness, procrastination. More here on effective procrastination.

For tech-hungry people, here is some food to whet your appetite.

And for bookies, bookworms…. you may find these useful and also this.

Special note: To all those who have worked too much without knowing where they are heading or where they have landed (like d*nkey.. I should not say that) and also to all who think life has become quite boring, try to be little lazy. I am sure you will enjoy it. And thats thought for today… see the happiness in laziness.