Friday, May 18, 2007

How to remove the virus Hacked by Godzilla

This virus is not harmful in a sense it does not affect any file system. It adds up "Hacked by Godzilla" in the browser's title bar making us worry that we are hacked by someone.
I was stuck by this problem for two days. I found solution for this on a Thai website.I am just going to share this to my reader.
Here are the steps you have to follow:

1.
Open any windows file folder. Then go to Tools>folder options>view
check Show hidden files and folders
uncheck Hide protected operating systems files

Now you can view the hidden files and protected system files and folders.

2.
Open windows Task Manager and go to processes
End all the processes that end with vbscript.exe

3.
Search for autorun.inf and delete all
Delete all files that contain the text MS32DLL.dll.vbs
Delete: C:\Windows\MS32DLL.dll.vbs file

4.
Run regedit
Go to: HKEY-LOCAL-MACHINE > software > Microsoft > Windows > Current Version > Run
Find MS32DLL and delete it
Then select HKEY-CURRENT-USER > Software > Internet Explorer > Main
There find "Window title Hacked by Godzilla" and delete that

5.
Run gpedit.msc
Select user configuration > Administrative Templates > System > Turn off Autoplay
Select "enabled"
Select "all drives"

6.
Run msconfig
Click start up
Find MS32DLL and take it out
Select exit without restart

7.
You have completed removing the virus but to ensure that it does not catch again. clean the recycle bean. Then restore the folder options to Don't show hidden files and folders and Hide Operating system Protected folders. After this you are done.