Posting in this IT forum for the first time. I have some friends seeing this on their IE browser (6.0) title bar after using the wireless broadband in a hotel in Bangkok.
Anyone heard of this and know how to cure this?
Anti-virus was active at the time but reported no issue even when executed to scan again. Anti-virus is a branded one (not sure if it is ok to post their name here) and a call to them draws no response as they have no entry in their KB that talks about this.
If you do a google search of hacked by godzilla, you will see a lot of Thai entries found.
Thanks in advance
ndmmxiaomayi
Heard before. Godzilla is a notorious gang. There's no way that I can help, unless somebody can translate Thai into English for me. Don't tell me online translators, they aren't reliable.
alexkusu
hai, swadekarp? puth thong hae maih?
ndmmxiaomayi
OK, managed to find something readable.
Try this. Show your hidden files and folders.
My Computer > Tools > Folders Options
Click the View tab.
Under Hidden files and folders, select Show hidden files and folders
Untick Hide extensions for known file type box
Untick Hide protected operating system files box
Press OK to apply the settings.
Next, press Ctrl + Shift + Esc to bring up Task Manager.
Click on the Processes tab. Find this process: wscript.exe and click End Process at the bottom right hand corner.
Edit: Got more sense of Thai language.
After ending the process, go to C:\WINDOWS and find MS32DLL.dll.vbs
Select this file and press the Delete button.
Empty your Recycle Bin.
After this, open Registry Editor. (Start > Run > regedit)
Click on the + sign. Make sure you look at it carefully, or else your Windows will be gone case.
HKEY_LOCAL_MACHINE > Software > Current Version > Run
You will be able to see MS32DLL. Select it and press the Delete button.
Still working in regedit, navigate to HKEY_CURRENT_USER > Software > Microsoft > Internet Explorer > Main
Will see Window Title “Hacked by Godzilla”. If found, delete it.
Exit Registry Editor...
The go to Start > Run and type in msconfig.
Select the Startup tab. Uncheck MS32DLL
Restart your computer...
Go to My Computer > Tools > Folders Options
Select the View tab.
Under Hidden files and folders, select Do not show hidden files and folders
Tick Hide extensions for known file type box
Tick Hide protected operating system files box
Click OK to apply the settings.
ndmmxiaomayi
Originally posted by alexkusu:
hai, swadekarp? puth thong hae maih?
alex you know Thai mah?
chech01
Thanks!! for the solution. My anti-virus vendor can close their Indian call-centre which is of no help.