- Double-click on My Computer on Desktop.
- Choose Tools and select "Folder options"
- Click on "View" tab, select "Show Hidden files and folders" and uncheck "Hide Extention...."
- Click on "Hide protected operating system files" (these selections are important to find the files you need to delete)
- Click "OK."
- Open Windows Task Manager (ctrl-alt-del) and select the "Processes" tab
- Click on "Image name" to sort the list
- Find "wscript.exe" and click on "End Process" (if there is more than one process with that name you have to end all of them)
- Close Windows Task Manager.
- Click on Start and select "Search" and search for "autorun.inf" (search the computer)
- Delete all the files that contain the text MS32DLL.dll.vbs (the virus) by pressing Shift+Delete. (There obviously should not be Autorun.inf in the C: root).
- You will also delete the virus from the system (C:\WINDOWS\ MS32DLL.dll.vbs) by pressing g Shift+Delete.
- Next you have to edit the Register. (Please not that you have to be very careful in the Registry tools; certain mistakes in the Registry can crash your computer)
- Click on "Start" and select "Run" and type in "Regedit" and press "Enter".
- Select HKEY_LOCAL_MACHINE --> Software -->Microsoft -->Windows --> Current Version --> Run.
- Find "MS32DLL" and delete that entry.
- Select HKEY_CURRENT_USER --> Software --> Microsoft --> Internet Explorer --> Main. There you find Window Title "Hacked by Godzilla" and you should delete that entry. You can close the Registry now.
- Click on Start --> Run and type in "gpedit.msc" and press "Enter."
- Open "Group Policy": select User Configuration --> Administrative Templates --> System --> and there you will double click on "Turn Off Autoplay"
- In the window there you should select "Enabled" and select "All drives" (they say in a certain Thai website that select all turn of Autoplay will be safer for not getting viruses). Now you can close the Group Policy.
- Click on Start --> Run and type "msconfig" and press "Enter".
- Open "System Configuration Utility".
- Click on "Startup" tab
- Find the file MS32DLL, choose Enable All, then uncheck "MS32DLL"
- Click Apply and then OK to close
- Exit the "System Configuration Utility" and select "Exit Without Restart" when prompt.
- After this, double-click on My Computer and select "Tools" and "Folder Options" and "View" tap to change back there.
- select "Hide Extention..." and "Hide protected operating system file" and "Don't show hidden files and folders".
- Empty the "Recycle bin" and "Restart" your computer.
Follow the set of commands below to show and delete the autorun.inf
- Open Start>>Run and type cmd and press enter. This will open a command prompt window. On this command prompt window type the following steps.
- type cd\
- type attrib -r -h -s autorun.inf
- type del autorun.inf
- now type d: and press enter for d: drive partition. Now repeat steps 3 and 4. Similarly repeat step 5 for all your hard disk partition.
- Restart your system and your trouble will be fixed.
No comments:
Post a Comment