"Orkut spreads virus" problem in IE

Orkut may be barred as a virus spreading site by the IE due to the presence of a worm
file win.exe

Win.exe is file that itself has no description or a window. It starts with windows
in the background. This program can monitor our inputs, applications and also may
block users from opening Orkut in IE displaying a message saying that orkut spreads viruses.

When this happens to you, do the following:

Open Task Manager (Disabled?)
Select Processes tab, right click on the process win.exe and select End Process Tree and click Yes to confirm.
Now you can access Orkut in IE.

Now to remove it completely, the below steps may be helpful:

Check for the file win.exe in
C:\ (windows drive)
C:\windows (system root)
C:\Documents and Settings
If found delete it.


Open Registry Editor (Disabled?)(No Run in Start menu)
Press Home button keyboard. (If you have a already open tree in registry editor)
Press Ctrl+F to open the Find dialog box.
Type in win.exe and click on Find Next.
Delete the key that has the values win.exe [Make sure you backup every keys before doing any deletion]

Below keys may have the win.exe entry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run

(want to jump directly to a registry key?)

This should help you to get rid of the problem.

No comments:

Please Note:

Please note that, you may not be able to download some files that are given in my blog entries. Its due to the withdrawal of one of my file server site.Since I have no much time to work on this blog, I cannot upload all the files once again to another server. If you are in urgent for any one of such files, please leave me a scrap regarding it, I'll upload only that file on other server.
-WaseemSR™