http://www.interstraits.biz/virusms32.htm
1. Finding potential processes running
- Press CTRL, ALT and DELETE key together. You will open the Windows Task Manager.
- Click the Processes tab, and comb through the list and see whether there is a program called wscript.exe is running. If you find it, click on it and click End Process.
- After that you can close the Task Manager window.
2. Go to command prompt
Start
Run
CMD
OK
and unhide autorun.inf and ms32dll.dll.vbs files and delete them
C:
cd c:\
attrib -s -r -h autorun.inf
del autorun.inf
attrib -s -r -h ms32dll.dll.vbs
del ms32dll.dll.vbs
go to c:\windows and unhide ms32dll.dll.vbs and delet it
cd \windows
attrib -s -r -h ms32dll.dll.vbs
del ms32dll.dll.vbs
Repeat the above with any USB memory sticks or Hard Disk Drives eg if E: drive
E:
cd \
attrib -s -r -h autorun.inf
del autorun.inf
attrib -s -r -h ms32dll.dll.vbs
del ms32dll.dll.vbs
Also make changes to the registry and
- On your left there will be the registry directories. Look for:
HKEY_LOCAL_MACHINE --> Software --> Microsoft --> Windows --> Current Version --> Run
- If there is a MS32DLL in there, delete the entry.
- Then you need to look for:
HKEY_CURRENT_USER --> Software --> Microsoft --> Internet Explorer --> Main
- If you see the Window Title has "Hacked by Godzilla" you should delete that entry.
and
5. Stop all auto runs in future (recommended move)
- Click on Start --> Run
- Type gpedit.msc and press ENTER
- You will come to the Group Policy window
- Go to User Configuration --> Administrative Templates --> System
- Look for Turn off Autoplay and double click it. You will come to Turn Off Autoplay Properties window.
- Click Enable and select All drives from the drop-down combo box.
(It is suggested to turn it off to avoid further potential virus infections in future)