Monday, May 28, 2007

Hacked By Godzilla - Virus Fix

Hacked By Godzilla - Virus Fixed

Hacked By Godzilla is a new computer virus that widely infect from using Handy Drive or Floppy Disk

Defected

1. We can not Double Click to open any Drive on our computer. But we can Right Click to Open or Explore.
2. There is a text “Hacked By Godzilla” on Title Bar of Internet Explorer.


How to fix Godzilla

1. Double Click on My Computer icon on Desktop and select Tools --> Folder Options


2. When Folder Options cliak at View tab

i. check at Show Hidden files and folders
ii. unchuck the Hide extention… and Hide protected operating system file
iii. click OK

3. Press Ctrl+Alt+Delete. The Windows Task Manager will dispalay. Click at Processes tab

i. Click menu Image Name (to sort Files)
ii. Select wscript.exe (one by one)
iii. Click End Process button

4. Open drive (By right click and select Explore. Must not Double Click !) Delete autorun.inf and MS32DLL.dll.vbs (Press Shift+Delete) in all drives include Handy Drive and Floppy disk.


5. Open folder C:\WINDOWS to delete MS32DLL.dll.vbs inside (press Shift+Delete )

6. Go to Start --> Run and enter regedit click OK. Registry Edit dialoq will display.

7. Select HKEY_LOCAL_MACHINE --> Software --> Current Version --> Run to delete MS32DLL (press Delete key on keyboard)

8. Select HKEY_CURRENT_USER --> Software --> Microsoft --> Internet Explorer --> Main to delete Window Title “Hacked by Godzilla” (press Delete key on keyboard)

9. Click Start --> Run and enter gpedit.msc click OK. Group Policy dialoq will display.

10. Select User Configuration --> Administrative Templates --> System --> Double Click on file Turn Off Autoplay then Turn Off Autoplay Properties will display

i. Select Enabled
ii. Select All drives
iii. Click OK

To prevent auto open when we insert CD or plug the Handy Drive that is the way virus infect.


11. ClickStart --> Run and enter msconfig Click OK. the System Configuration Utility dialoq will display

i. Click Startup tab
ii.Uncheck MS32DLL
iii. Click Apply
iv. Click OK (or Close)

When the System Configuration dialoq display select Exit Without Restart


12. Double Click on icon My Computer on Desktop. Then select Tools --> Folder Options
On Folder Options dialoq select View tab

i. Check at Hide extention… and Hide protected operating system file
ii. Click OK


13. Right Click at Recycle bin. Then select Empty Recycle Bin to make sure the virus is deleted.