SYMPTOMS :
You can't double click to open a drive, but you can right click and select Open or Explore.
Internet Explorer shows 'Hacked by Godzilla' in the title bar.
EXTREMELY IMPORTANT Before you do anything else, make a backup of the windows registry!! To do this, Go to Start -> Run.Type in regedit. Click OK. This will open the registry editor. With the Registry Editor Open click once on "My Computer" to highlight it. Then click File, then select Export. Save the export as Registry Backup. If you do not make a backup and make a mistake in changing the registry which must be done to get rid of the virus, you may have to reformat and reinstall Windows to get back to normal operation. Since you cannot create a system restore point, making this backup of the registry is critical.
SOLUTIONS :
Double click the My Computer icon on the desktop. Then select Tools -> Folder Options
-Click the View Tab and in the list of options:
-Click the radio button for Show Hidden files and folders
-Uncheck the boxes for
"Hide Extensions for known file types" and
"Hide Protected Operating System Files Recommended)"
(After removing the virus, you should reverse these actions - instructions for doing this are at the end of the Fix)
-Click OK at the bottom of the Folder Options Window. Do not close Windows Explorer yet!
1. Press Control-Alt-Del to bring up the Task Manager
2. Click the "Processes" Tab> Under the column 'Image Name" locate the item "wscript.exe".
Click on it to highlight it, then right click and select "End Process"
3. Go back to Windows Explorer - do not double click anything.
Locate the files autorun.inf and MS32DLL.dll.vbs
(although the instructions do not specify a location, they should be located at c:\autorun.inf and c:\MS32DLL.dll.vbs (or on the drive that contains the operating system, if not C drive).
Left click ONCE on each to highlight it. Then Press Shift+Del.
Do this for the root of each drive, e.g., (c:\ is the root...folders appearing after the root are not!)
d:\autorun.inf and d:\MS32DLL.dll.vbs
e:\autorun.inf and e:\MS32DLL.dll.vbs
f:\autorun.inf and f:\MS32DLL.dll.vbs, etc.
4. Open the folder c:\Windows and delete the file MS32DLL.dll.vbs by using Shift+Del
IF YOU DIDN'T BACK UP THE REGISTRY YET, DO IT NOW!!
5. Go to Start -> Run.Type in regedit. Click OK. This will open the registry editor
6. In the Registry Editor,
navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Current Version\Run.
In the right frame, locate MS32DLL. Click it once to highlight it and right click and delete it.
if you do not find it, proceed to the next step
7. While still in the Registry Editor, navigate to HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main.
In the right frame locate the name Windows Title "Hacked by Godzilla" Right click the item Windows Title and delete it.
8. Click Start | Run. Type in gpedit.msc then click OK
In the left frame double left click User Configuration, then Administrative Templates then System.
In the right frame locate Turn off Autoplay. Double left click it and Click the radio button for Enabled and select "All drives" .
Then click OK. By disabling autoruns,
you will be able to run virus and spyware scans on a CD/DVD Floppy or USB BEFORE a virus or spyware can execute. Now you can close the Group Policy Editor.
9. Click Start | Run. Type in msconfig, then click OK. When the Configuration editor opens click the Startup tab.
Locate the item ms32dll (it should be in the startup item column) and uncheck the box.
Click OK at the bottom to close the Configuration Editor, and, when asked (and you will be), select "Exit Without Restart"
10. Locate the Recycle bin in Windows Explorer an click right on it and select Empty Recycle bin
11. Reboot your computer. The virus should be gone.
12. Right click the My Computer icon on your desktop and select properties. Then click the System Restore tab
Select "Turn off System Restore on all drives. Then Click "Apply" and OK
13. Reboot your computer.
14. Right click the My Computer icon on your desktop and select properties. Then click the System Restore tab.
Uncheck the box for "Turn off System Restore on all drives. Then Click "Apply" and OK
By the way, there is easy way and save your time...Click here
