imgkulot virus (?)?

Question

pls. help! i just found out i can't open my drive c and drive e (flashdrive) and they have this imgkulot beside open and explore pull-down menu. i've read the other questions here and the answers, so i decided to take the plunge: i deleted imgkulot.* files on the following directories: c:\ & c:\windows\system32

now they can't be found but when i reboot my pc, and go to My Computer, I can still see the imgkulot word beside Open & Explore. i already deleted autorun.inf from my flash drive and it is now working perfectly well but my hard drive has the imgkulot even though i have already deleted them and reboot my pc. and i restore my backup registry but it is still there.

how can i completely erase imgkulot? thank goodness, at least my pc don't reboot like everybody else's pc is doing.

Answer 1

Kill the process wscript.exe in the task manager.

open command prompt
then type the ff:

cd windows\system32
attrib imgkulot.* -s -h -r -a
attrib autorun.inf -s -h -r -a
del imgkulot.*
del autorun.inf

for the individual drives.
go to the root drive.
attrib imgkulot.* -s -h -r -a
attrib autorun.inf -s -h -r -a
del imgkulot.*
del autorun.inf

restart computer.

Answer 2

2

Answer 3

I'm sorry to hear you are experiencing difficulties with a virus on your computer. The following are a few links that may help you with this issue.

Also, if you do not feel comfortable walking through any of the steps listed below (Link #1), please be sure to contact either your (Anti-Virus Vendor???), or Microsoft (Link #2) to have a Technician provide you with additional assistance by walking you through the process. Link #3 has information that you may want to review, and keep for future reference.

http://answers.yahoo.com/question/index?qid=20070815021621AAzxUR6

http://support.microsoft.com/default.aspx/gp/securityhome

http://www.microsoft.com/protect/default.mspx

I hope you will find this information helpful. Best of luck. :-)

Answer 4

First you need full security as it should have not got in in the first place. Below link on; What you need, Why you need it, Where to get it. All free.
http://www.phpbbserver.com/stevie19605/viewtopic.php?t=40&mforum=stevie19605.

Update all the Anti Virus\Anti Spyware before doing a full scan. You might need to scan in Safe Mode (Tapping F8) as your PC starts up. You might need to turn off System Restore as some malware hides in System Restore

Answer 5

This is a general solution for viruses and malware, but it should help you as well. Perform step #1 in any case, and then you may want to skip right to item #10


First, you will need to get some software programs to help you. They are free for personal use.

Anti-Spyware Software

• CWShredder - You can find it at [www.trendmicro.com/cwshredder]
• Lavasoft's Ad-Aware - You can find it at [www.lavasoftusa.com]
• Spybot S&D - You can find it at [www.spybot.info]

• AVG AntiSpyware - You can find it at [free.grisoft.com] / [www.ewido.net]
Anti-Virus Software


Download each of the above programs and then install them. After you install them, you MUST update them so you will have the latest protection. There is one small exception: CWShredder is a stand-alone program that doesn't need to be installed, but you do need to have it check for an update to ensure that you have the latest version. If you don't update these programs and you are infected with the latest parasites, you will not be able to effectively detect and clean them from your computer, so remember to update, update, update.


1) Turn off System Restore

• Viruses can hide in your restore files, and if you do restore at some point you might reinfect yourself. Because of this, it is recommended to turn off System Restore before you test, and when you're done, turn it back on so you are still protected from standard computer problems.


Click Start.
Right-click the My Computer icon, and then click Properties.
Click the System Restore tab.
Check "Turn off System Restore" or "Turn off System Restore on all drives."
Click Apply.
When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
Click OK.

2) Carefully Look at Windows Add/Remove programs for suspicious programs

• Many of the spyware threats actually install into your system like a program. Many appear to be utilities that you may think are helpful but in reality aren't. Look for add-an toolbars, while toolbars like those provided by Google, MSN, Yahoo and other are great utils, there are many more that aren't and if in doubt check it out to see if ones you have are parasitic. Another common exploit are the Search helpers, WinTools, Gator products, IE Helper, Comet Cursor and many others just to name a very few. Peer-to-Peer (P2P) programs are another common source for these and even the ones that doen't come with spyware themselves are a security risk that may lead to your system being infected or to spread infections like these. Remove all suspicious programs, if you are wrong, you may always re-install them later.

3) Run Disk Clean-Up

• This actually comes with Windows. Click the Start Button and then go to Programs / Accessories / System Tools / Disk Clean-up. I recommend selecting all of its options except the ones for Office Setup Files and Compress Old Files if you have them. While you may select those if you wish, they aren't as important. This will clean up all of the temporary files so your testing will go faster, and may also delete any spyware that may hiding there if the spyware isn't already running.

4) Empty your Internet Explorer cache

• Open Internet Explorer and go to Tools..Internet Options… and under the General tab, in the Browsing History section, click Delete… and then select Temporary Internet Files. This probably won’t eliminate any viruses but will make the scanning go faster.

5) Run CWShredder

• This is made for detecting and cleaning of the infamous CoolWebSearch exploits. Currently there are about 40 types of these, each with up to 4 variants and growing. These are some of the toughest ones to get rid of.

6) Run Ad-Aware next

• This handles the next toughest types the best. When it finally presents you with the list of parasites it has found, put a check mark in the box next to the ones you want to get rid of, I suggest checking them all. If it says it can't get rid of a problem right now, it will ask if you want to run it again after you restart your computer, answer yes and restart your computer so it may test again.

7) Run Spybot next

• When you run it, it will automatically select all the spyware that it finds, if there is something you don't want to get rid of for some reason, deselect it and then let Spybot fix all of the rest of the problems that it finds. This program also will ask to restart your computer so it can test again if it has problems removing something, so let it.


8) Now Run The AVG Program

• Run the “Complete system scan” option. AVG will scan all of the files when you scan your computer; it will likely take a long time to complete.

• If it found anything, restart your computer and test everything again. There are times that after cleaning certain parasites you will need to test again because something may have been hidden earlier by the infection. So repeat this process of testing and restarting until you find no more parasites.

• Run the scans again in Safe Mode. This will keep many of the parasites from loading and being able to hide from your protection software. To access Safe Mode on most versions of Windows, start tapping the [F8] key after you first start or restart your system, start tapping it before you ever see a Windows Splash Screen and continue until you get the Menu where you may select it from the list. On WinNT, this is called VGA mode and on Win2k you actually start tapping just after the first splash screen shows. For Detailed instructions see Restarting Your Computer in Safe Mode

9) Reboot your computer normally.
• If you're still having problems, continue with the following:

10) Go to
www.spywareinfo.com/~merijn

• and download HiJackThis. (Look on the left of the page, click on “Downloads” and select “HiJackThis”). Run the program, which will create a log file. Go to

http://forums.spywareinfo.com/

• and post your HiJackThis log. You will get an extremely rapid, very precise answer on the forum (they don’t e-mail responses to you) as to whether or not you still have any infections and, if so, exactly what to do.

11) After everything is all cleaned up
• I recommend installing SpywareTerminator (also free):
http://www.spywareterminator.com/
Good luck!