Bits n' Bytes

Removing ‘Hacked by Godzilla’ virus

technotics — Sat, 06 Oct 2007 18:23:49 +0000

Hacked By Godzilla is a new computer virus that widely infect from using Handy Drive or Floppy Disk

Defected

We can not Double Click to open any Drive on our computer. But we can Right Click to Open or Explore.
There is a text “Hacked By Godzilla” on Title Bar of Internet Explorer.

How to fix Godzilla

Double Click on My Computer icon on Desktop and select Tools –> Folder Options
Check ‘Show Hidden files and folders’
Uncheck the Hide extention… and Hide protected operating system file
Click OK.
Press Ctrl+Alt+Delete. The Windows Task Manager will be displayed. Click at the Processes tab.
Click menu Image Name (to sort Files)
Select wscript.exe (one by one)
Click End Process button
Open drive (By right click and select Explore. Must not Double Click !) Delete autorun.inf and MS32DLL.dll.vbs (Press Shift+Delete) in all drives include Handy Drive and Floppy disk.
Open folder C:\WINDOWS to delete MS32DLL.dll.vbs inside (press Shift+Delete )
Go to Start –> Run and enter regedit click OK. Registry Edit dialoq will display.
Select HKEY_LOCAL_MACHINE –> Software –> Microsoft –> Windows –> Current Version –> Run to delete MS32DLL (press Delete key on keyboard)
Select HKEY_CURRENT_USER –> Software –> Microsoft –> Internet Explorer –> Main to delete Window Title “Hacked by Godzilla” (press Delete key on keyboard)
Click Start –> Run and enter gpedit.msc click OK. Group Policy dialoq will display.
Select User Configuration –> Administrative Templates –> System –> Double Click on file Turn Off Autoplay then Turn Off Autoplay Properties will display
Select Enabled.
Select All drives.
Click OK.
To prevent auto open when we insert CD or plug the Handy Drive that is the way virus infect.
Click Start –> Run and enter msconfig Click OK. the System Configuration Utility dialog will display
Click Startup tab
Uncheck MS32DLL.
Click Apply.
Click OK (or Close).
When the System Configuration dialoq display select Exit Without Restart
Double Click on icon My Computer on Desktop. Then select Tools –> Folder Options
On Folder Options dialog select View tab
Check at Hide extension… and Hide protected operating system file
Click OK
Right Click at Recycle bin. Then select Empty Recycle Bin to make sure the virus is deleted.
When Folder Options click at View tab

I guarantee everyone that this will work.

C tutorials

technotics — Sat, 06 Oct 2007 18:20:08 +0000

I’ve found this on the net. I’ll update the list regularly for everyone’s benefit.

Removing W32 Sohanad.B or W32 Sohanad.C

technotics — Sat, 06 Oct 2007 18:17:18 +0000

This is a worm that spreads itself by sending links to your contacts in Yahoo, AOL and Windows Live messengers. It disables the Registry Editor and Task Manager, changes the Internet Explorer (IE) home page and also modifies registry such that you cannot change the homepage address.

Download this file.
Double click on the downloaded file, it will execute to restore from the damage done to registry by the worm.
Restart your system.
Delete the file svhost32.exe from your Windows folder ( If it is present).
Delete the file svhost.exe from your Windows folder( If it is present).

You can now use the Yahoo! Messenger peacefully.

Turbo C v2.0

technotics — Sat, 06 Oct 2007 18:09:45 +0000

1989 – The American release was in late 1988, and featured the first “blue screen” version, which would be typical of all future Borland releases for MS-DOS. The American release did not have Turbo Assembler or a separate debugger. (These were being sold separately as the product Turbo Assembler.) See this ad for details: Turbo C, Asm, and Debugger were sold together as a professional suite of tools. This seems to describe another release: Featured Turbo Debugger, Turbo Assembler, and an extensive graphics library. This version of Turbo C was also released for the Atari ST, but distributed in Germany only.

Download: part1, part2