new worm? spyware? need reply

system · 2007-09-18T03:08:55.000Z

guys check this out! me and my friends got this virus or i really dont have any idea as it seems harmless(???!) under the right click drop down menu of every hdd, partitioned hdd, usb flashdrive and sh_T!!! including my ipod has an extension name of (img kulot) on the open and explore function ???. please i need help here.

FreewheelinFrank · 2007-09-18T07:44:29.000Z

Hi zhon,

There is some advice here in English and another language, maybe yours, I don’t know:

How to delete the ing(kulot) virus safely:

Have your PC display the contents of the system folder
and hidden files.

delete all the img(kulot) files and the autorun.inf

Do this also to all removable drives such as flash drives…

The virus also does not infect windows vista…

http://ww.pcx.com.ph/forum/display_topic_threads.asp?ForumID=3&TopicID=27213&PagePosition=1

Before you do this, please send a copy of the virus to virus[at]avast.com in a password protected archive- mention the password in the body of the email.

Alternatively, open the virus chest, select user files, add the two file and send to avast from there.

You could also send the files to VirusTotal.com. This will show what other scanners might be picking up the infection and thus be able to remove it.

system · 2007-09-19T06:36:08.000Z

thanks freewillin frank

system · 2007-09-21T07:30:48.000Z

At last!!! I have found the solution to the worm i found, freewillin frank thanks for the help but somehow i wasnt able to completely remove the script like what you’ve told me. well actually the process was a bit the same but this is the complete procedure.

to remove the vbs script virus

stop the process at the task manager (ctrl+alt+del), look for wscript.exe and click end process.
run msconfig and go to startup tab, look for any services that has the name imgkulot.bat and click disable
if you can’t find imgkulot.bat thats ok close msconfig and proceed to step 3.
search your hard drive(s) for the files imgkulot.vbs, imgkulot.reg and imgkulot.bat Using the search function when you right click the drive make your you have unhide system files and under the advanced option of search check the box “search system folder” and “search hidden files and folders”.

WARNING!!! DO NOT MANUAL SEARCH THE ABOVE FILES, DOING SO WILL EXECUTE THE AUTORUN.INF AND WILL RUN THE SCRIPT AGAIN
(every time you hit double click one of your drives that is infected by the script the autorun.inf will execute if you accidentally did repeat step 1.)

if you have found the imgkulot files as mentioned above delete everything there are files that needs their properties to be changed prior to deleting, uncheck the box “read only file” for you to delete it.
after deleting the imgkulot files search the whole hard drives again for the autorun.inf change the properties of the file if ever you cant delete it. then delete all files
6.hope this help

system · 2007-09-21T07:39:05.000Z

…

system · 2007-09-21T08:23:26.000Z

Welcome to the forum, zhon.

We are glad you found the solution to your problem.
Thank you for posting what worked for you and perhaps it will help someone else.

Please come back often, learn more, and maybe help others.

Announcements