Yesterday one of my colleague came up with a peculiar problem... She was unable to open Orkut/YouTube on both Chrome & IE. Every time she typed either of the URL, she would get the message, "ORKUT/youtube IS BANNED, Orkut is banned you fool,The administrators didnt write this program guess who did?? MUHAHAHA!! ". Then the browser would close. IE was quick, almost as if it crashed while Chrome took some time to close.
I first happened to see this on Chrome. So thought, some intelligent friend of hers put a nice piece of add-on code (javascript!) into her browser to check URLs and close on finding Orkut/Youtube in the address bar. After 10 minutes of futile search on her comp, realized that this wasn't a friendly add-on prank. It turned out to be a worm (W32.USB) that spreads thru USB drives and was detected almost a year back. Microsoft forefront client security (with virus definition: 1.67.470.0), the virus software my company uses, didn't detect it. My conspiracy theory is that its a deliberate choice by M$ to exclude this worm from virus defection. After all it targets Google sites and Firefox browser.
Its fairly easy to remove this annoying code. The link above should give the instructions. If you are interested to see the code, its here.
Posts
