Farma Posted February 28, 2007 Share Posted February 28, 2007 A friends computer has this message appear when they connected to the internet "Hacked by MICROSOF-65B5EF" NOD32 and adaware don't find the problem and I can't find info on msn live or google searches. Any help appreciated. Link to comment Share on other sites More sharing options...
cdnvic Posted February 28, 2007 Share Posted February 28, 2007 I found a few references to it and it seems to be just another variant of the godzilla annoyance that we've seen here before. Try the instructions in this thread: http://www.thaivisa.com/forum/index.php?showtopic=96863 Link to comment Share on other sites More sharing options...
cdnvic Posted February 28, 2007 Share Posted February 28, 2007 If you can find the file, send it to Eset and have them take a look at it; To submit a suspicious file to Eset for analysis, please carry on as follows: * compress the file(s) into a zip or rar archive, protect it with the password "infected" * attach the archive to an email message * send the message with the attachment to [email protected] http://www.eset.com/support/faq1.php?id=1110 Link to comment Share on other sites More sharing options...
Farma Posted March 1, 2007 Author Share Posted March 1, 2007 Thank cdnvic I will pass the info on. Link to comment Share on other sites More sharing options...
Farma Posted March 1, 2007 Author Share Posted March 1, 2007 Success. It was a variant of godzilla. The link to the fix is http://www.aphonda.co.th/Download/KillGodzilla4.zip Link to comment Share on other sites More sharing options...
cdnvic Posted March 1, 2007 Share Posted March 1, 2007 This has to be the gayest excuse for a virus I've ever seen. Link to comment Share on other sites More sharing options...
Farma Posted March 1, 2007 Author Share Posted March 1, 2007 It's slowly changing from the original godzilla. The original fix on the other thread didn't delete it. The godzilla4 fix had to be run twice to rid it. Link to comment Share on other sites More sharing options...
Aujuba Posted March 2, 2007 Share Posted March 2, 2007 (edited) Got this one on our work computers too. It hijacks the homepage to a Thai gamesite called lastchaos. At the top of the Internet explorer it says 'Hacked by Moozilla' The recommendations worked. Notice that the KILLGodzilla cleaner is on update Number 4 now I think. I guess it is mutating very fast. I think people that use the computer at work brought it in through opening a bad email. I also wonder if it is possible to get it through Yahoo messenger because we have one girl who likes to use that here at my work. Anyways it was brought onto the computer by a Thai user at my office. I bet a lot of Thai net users are being wailed by this right now. This is the second time we got hit. Just type in 'Moozilla' at Google thailand and you'll se quite a few posts. Edited March 2, 2007 by Aujuba Link to comment Share on other sites More sharing options...
.png.3b3332cc2256ad0edbc2fe9404feeef0.png)
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now