If you encounter odd or otherwise unexpected messages during startup of Firefox or when visiting specific websites, your local desktop may be infected with a virus. This article describes some symptoms of the infection and how to remove the virus.

Note: It's a good idea to maintain updated anti-virus software on your local computer, regardless of the programs that you have installed on it. You can also periodically scan your computer using one of the available online virus scanning programs listed in this page.

Table Of Contents

• Messages in your browser
• Internet Explorer
• Other messages
• How to fix your computer
• Virus background
• Removing the virus

Messages in your browser

Internet Explorer

USE INTERNET EXPLORER U DOPE. I DNT HATE MOZILLA BUT USE IE OR ELSE...

Other messages

When visiting Orkut.com:

ORKUT IS BANNED. Orkut is banned you fool, The administrators didnt write 
this program guess who did?? MUHAHAHA!!

When visiting YouTube.com:

youtube IS BANNED. youtube is banned you fool, The administrators didnt 
write this program guess who did?? MUHAHAHA!!

How to fix your computer

Virus background

If any of the above conditions appear while you are using Firefox, you have been infected with the W32/AHKHeap virus. This virus is spread via removable drives such as USB removable drives. For more information, see "W32/AHKHeap" virus.

Removing the virus

To remove this virus, you can use online anti-virus tools. The following scanners run in your browser using a plugin, and also can remove/repair many infections:

• Trend Micro HouseCall - Java or ActiveX
• Panda ActiveScan - ActiveX only (IE only)
• eTrust Antivirus Scanner - ActiveX only (IE only)

You also can use antivirus software you install on your computer. The following commercial products are popular with Windows users:

• McAfee VirusScan Plus
• Norton AntiVirus 2007

When you have removed the virus, restart Firefox.

Based on information from Use IE messages upon opening Firefox (mozillaZine KB)