“Hacked By Godzilla” ?
- internet explorer title bar showing you the message : hacked by Godzilla
- double-clicking a HDD does not open it, or runs an autorun program, and eventually CPU usage gone through the roof.
if any of these symptoms are happining in your MS Windows OS, then you must do the following to solve the problem:
-double click on My computer , choose Tool and select “Folder options”, click on “View” tap, select “Show Hidden files and folders” and unchecke both ”Hide Extention….” and “Hide protected operating system file” (those selections are important to find the files you need to delete)
then click “OK”.
- open Windows Task Manager (ctrl-alt-del) and select the “Processes” tap
– find “wscript.exe” and click on “End Process” (if there is more than one process with that name you have to end all of them)
- go to each hard disk partition you have and find the file : “autorun.inf”, it will be in the root of each partition, example, if you have the partitions C D and E, the file location will be : C:\ autorun.inf or/and D:\autorun.inf and /or E:\autorun.inf ( directly on the disk, not hidden in any folder)
– Delete the Autorun.inf file ( there shall be no autorun.inf file on a fixed hard disk like C or D or E.)
– you will also need to delete the virus from the system (C:\WINDOWS\ MS32DLL.dll.vbs) by pressing: SHIFT + DELETE
- Next step is to edit the Registery :
— first, click on “Start” and select “Run” and type in “Regedit” and press “Enter”.
— select HKEY_LOCAL_MACHINE –> Software –>Microsoft –>Windows –> Current Version –> Run.
— find there “MS32DLL” and delete that entry.
— Then select HKEY_CURRENT_USER –> Software –> Microsoft –> Internet Explorer –> Main. There you find “Window Title “Hacked by Godzilla”” and you should delete that entry.
— close the registry now.
- click on Start –> Run and type in “gpedit.msc” and press “Enter”. then you will open “Group Policy”.
– there you will select User Configuration –> Administrative Templates –> System –> and there you will double click on “Turn Off Autoplay”
– in the window there you should select “Enabled” and select “All drives”. Now you can close the Group Policy.
- Next you will click on Start –> Run and type “msconfig” and press “Enter”.
– you will open “System Configuration Utility”.
– click on “Startup” tap
– find the file MS32DLL, choose Enable All, then unhake “MS32DLL”
– click Apply then OK to close
– then you will exit the “System Configuration Utility” and select “Exit Without Restart” when prompt.
-After this you double click on My Computer and select “Tools” ->“Folder Options” ->“View” tap to change back there.
– select “Hide Extention…” and “Hide protected operating system file” and “Don’t show hidden files and folders”.
- -then you will empty the “Recycle bin” and “Restart” your computer.
now, on some of the computers after the restart you will find the file : MS32DLL.dll.vbs is still there but it changed its location, before opening any disk or IE , enable the hidden folders and sysyetm files show, then do a search for MS32DLL.dll.vbs , when found do shift+del and you are done, the virus is no more on your system.
#solution credit to thaiiceland with additions.
krishna said,
December 17, 2006 at 7:59 am
i follow all the advices that are in the text . but still there is message in ie hacked by godzilla.
ANATHEMA said,
December 17, 2006 at 2:15 pm
is the hard disk problem still there either? or just the IE problem?
toti said,
December 18, 2006 at 11:13 am
Harddisk and IE both still have problem.
ANATHEMA said,
December 18, 2006 at 11:20 am
we’ll I think that there’s no other solution, this method worked perfectly on many infected computers.
try this link:
http://www.softwaretipsandtricks.com/forum/hardware-problems/31569-hard-disk-drive-problem.html
you can find there some removal tools.
saleh said,
January 28, 2007 at 8:33 am
i could not sort out the problem because i couldn’t edit the regestry files
i mean i could not run regedit and at the same time the folder option in the tool
is not there so how to sort out
ANATHEMA said,
January 28, 2007 at 3:01 pm
well you’ve caught a virus that disables administrator’s privileges, I suggest that you log in a different account if you have one, or create a new account.
If you could reach that point, you can recover your privileges through gpedit.msc -> User Configuration -> Administrative Templates -> Start Menu.
سوالف.إماراتي » Blog Archive » آفة الفيروسات: copy.exe و MS32dll said,
February 17, 2007 at 2:39 am
[...] طريقة التخلص من مشكلة hacked by Godzilla تجدها هنا ودامت أجهزتكم خالية من الفيروسات [...]
yusra said,
March 6, 2007 at 7:20 pm
How can i restart the computar
nathalie said,
March 22, 2007 at 2:39 am
i was able to do everything untill it came to gpedit.msc …. when i typed it into Run it said ” Windows cannot find gpedit.msc. Make sure you typed it correctly (etc.)”
now what?
ANATHEMA said,
March 23, 2007 at 4:37 pm
just copy it from any other computer that is running Windows XP and paste it into yours.
gpedit.msc is found in the address: %SystemRoot%\system32 .
tamer said,
April 24, 2007 at 11:07 pm
each time i try to show hiden files it returns to hiden case and i can’t show this file any more,,
also i can’t find wscript.exe any where on task maneger
Hussain said,
May 20, 2007 at 1:24 am
thnx . it worked. but the D HD is still having the MS32DLL.dll.vbs problem .. now the other problem is that when ever i try to make show hidden file the option goes back auto to dont show hidden file when i do apply and close the window.
but the C HD is openning for me and the hacked by gozilla thingy is not there anymore .
my best regards.
Qwareeq said,
July 8, 2007 at 1:20 pm
Dear All;
I have check on show hidden file from folder option but when I pressed on Apply and Ok buttom , and go to my hidden file i didn’t see it. Suddenly, I shocked when I saw the show hidden file hasn’t check sign and the sign get back to hide hidden file automatically.plz could help me by my problem?
Thanks
Lunacy Glee said,
August 26, 2007 at 6:42 pm
Hey,
I have Qwareeq’s same problem. Help plz!
آفة الفيروسات: copy.exe و MS32dll | سوالف حسن said,
December 29, 2008 at 2:14 pm
[...] طريقة التخلص من مشكلة hacked by Godzilla تجدها هنا ودامت أجهزتكم خالية من الفيروسات [...]