Join MultiplyOpen a Free ShopSign InHelp
MultiplyLogo
SEARCH
Blog EntrySep 3, '07 5:24 AM
for everyone
 


I have encountered this virus and it cant be detected by my AV.

Symptoms: If you right click your drive. EX drive D: This will appear D: open (imgkulot)

 

If you double click instead of going inside the folder it will open under a new window.

This virus originated from Iloilo city.

There is more info in this site www.panot.xphost.org. I assume kalaban nang panot ang kulot.

 

2 methods of extraction

1. Download Anti imgkulot. Run the program insert your infected thumbdrive, memory card and reboot.

I have attached the anti imgkulot. Just download it.

2. Kill the process wscript.exe in the task manager.

open command prompt
then type the ff:

cd[backslash](i cant display backslash in this blog engine,T_T)
cd windows/system32
attrib imgkulot.* -s -h -r -a
attrib autorun.inf -s -h -r -a
del imgkulot.*
del autorun.inf



for the individual drives.
go to the root drive.

d: <---example only
cd[backslash](i cant display backslash in this blog engine,T_T)
attrib imgkulot.* -s -h -r -a
attrib autorun.inf -s -h -r -a
del imgkulot.*
del autorun.inf


restart PC




Attachment: anti-IMGkulot.zip

187 Comments
hansel4u wrote on Sep 13, '07
thanks sa imgkulot remover and other info bro!!! muntik nako magreformat..... been using NOD32 nadedelete nya un imgkulot pro makulit talaga... after madelete e di ko na maopen un harddrives and removable disk... 'till next time. salamat!
puretuts wrote on Sep 13, '07
Just glad to help. Nakaka asar ang gumawa nito. Sayang kasi kung reformat.

Na remove mo na? Dati ayaw ma detect nang imgkulot nang NOD pero ngayon detected na. Kaso after removing it hindi ma buksan ang drive dahil hinahanap niya ang vbs na script file.
hansel4u wrote on Sep 13, '07
yup.. all good na! may iba nga, nagreformat na pro nandoon pa din un vbs etc... buti na lang nakita ko agad blog mo nun nag search ako ng solutions... pang asar talaga yun virus na yun! tnx!
meigh82 wrote on Sep 14, '07
i have a problem with this imgkulot.... almost 4 computer units were infected with this virus. Though i was able to remove the virus in the 3 units using the imgkulot remover. Kaso nga lang, un isa pang computer ngtry kami pagremove ng virus afterw e restarted the computer hindi na kami makalog-in. always lang sya naglog-off. Please help!!!
virtualstefan13 wrote on Oct 7, '07
puretuts...

pede pakiupdate yung remover.... eto yung link...
=============================================
= http://www.fileupyours.com/files/111419/anti-IMGkulot.zip =
=============================================
para maiwasan yung log-in-log-off error pag d default installation yung windows nila...
puretuts wrote on Oct 7, '07
puretuts...

pede pakiupdate yung remover.... eto yung link...
=============================================
= http://www.fileupyours.com/files/111419/anti-IMGkulot.zip =
=============================================
para maiwasan yung log-in-log-off error pag d default installation yung windows nila...
Thanks.

By the way, NOD32 can now remove it.
virtualstefan13 wrote on Oct 7, '07
ya, it is now detected by NOD32 although it only deletes the imgkulot files and the autorun.inf is left behind.. thats where a "open with" error occurs.
silyangpilak wrote on Oct 10, '07
yay! salamat kuya.
burnmd4u wrote on Oct 10, '07
thank you sa anti-IMG kulot!!! yey!!!
cyrese wrote on Oct 28, '07
thank sa anti_IMGkulot!!! ask ko lng. pag stop ko sa wscript.exe d n kasi nag start pag reboot ko. is that ok? or dpat ko bang mabalik? tnx!!!
puretuts wrote on Oct 28, '07
yung script virus yun. you can run the anti imgkulot at wala na ito.
cyrese wrote on Nov 1, '07
aw... owki.. thanx a lot!!!! malaking tulong to para sa mga praning tulad ko. hehe.... :D
dekaycute wrote on Nov 9, '07
thanks much!! --desiree
peternorth69 wrote on Nov 15, '07
THANKS PARE.
geekdoll wrote on Nov 16, '07
Hi! My machine is infected with a different virus but I think they're of the same type.. when I right click on my hard drives instead of OPEN, it says "I LOVE MY PEANUT" tapos kung mag double click it says "Can't find peanut.vbs"

I have Kaspersky antivirus but it can't detect this peanut virus. Have you encountered this? I've search google but I can find no info. :(
puretuts wrote on Nov 16, '07
Hi! My machine is infected with a different virus but I think they're of the same type.. when I right click on my hard drives instead of OPEN, it says "I LOVE MY PEANUT" tapos kung mag double click it says "Can't find peanut.vbs"

I have Kaspersky antivirus but it can't detect this peanut virus. Have you encountered this? I've search google but I can find no info. :(
I think you can still open your drive. You can try the task bar then choose the drive. You can also read one entry in my blog to remove autorun on all the specific drive.

you may have to use registry edit to manually remove the virus.
virtualstefan13 wrote on Nov 16, '07
I love my peanut is just a modification of the imgkulot virus.

here is the fix for I luv my peanut virus

http://www.fileupyours.com/files/111419/anti-IMGkulot.zip
puretuts wrote on Nov 16, '07
I love my peanut is just a modification of the imgkulot virus.

here is the fix for I luv my peanut virus

http://www.fileupyours.com/files/111419/anti-IMGkulot.zip
thanks for the additional info
geekdoll wrote on Nov 18, '07
thanks guys!

i'll try the fix, virtualstefan13
Comment deleted at the request of the thread owner.
Comment deleted at the request of the thread owner.
Comment deleted at the request of the thread owner.
puretuts wrote on Nov 23, '07
guys just use the new fix by virtualstefan.

sphinxfire wrote on Nov 28, '07
thanks so much s info puretuts at virtualstefan.matagal ko nag niresearch ang virus n to e mga dalawang format n nga me.thanks so much
agustinejoel wrote on Nov 28, '07
guys can anyone know to remove the new Virus it like imgkulot but this one Deferent from imgkulot ito ay I LOVE YOU PEANUT can anyone have a comment in this one please Text me 09066614779 - TM
agustinejoel wrote on Nov 28, '07
tol can i have virtualstefan try ko sana sa computer ko kung ok lng?
virtualstefan13 wrote on Nov 29, '07
kuya.. download mo yung fix ko from:
http://www.fileupyours.com/files/111419/anti-IMGkulot.zip

meron na itong peanut virus remover...
virtualstefan13 wrote on Nov 29, '07
salamat pala titus... for having my remover on your site...
ngayun ko lang nasabi to...
^_^
vroque33 wrote on Dec 1, '07
Hello, Salamat sa anti-IMGkulot mo... bwisit muntik na kong magreformat ng laptop ko, meron kcng magaling na nkisaksak ng maruming flashdrive. thanks again...
puretuts wrote on Dec 1, '07
i just got the file sa isang blog. i think kay virtualstefan yun.
viewhouse23 wrote on Dec 2, '07
salamat sa provider..... God Blessed
agustinejoel wrote on Dec 4, '07
paano mag creat ng I LOVE PEANuT kc meron ako lagyan n PC naga hack kc sa system ko lagi niya ako kinukuhaan ng file n di dpat mron b kau pwd ma black ang NEtwork to network or internet to internet security
sleek888 wrote on Dec 5, '07
oh my freakin sh1t!!! thnks for the PROVIDERS (puretuts and virtualstefan).. galing niyo pare!! ROCK ON! lml,
puretuts wrote on Dec 5, '07
i just spread the work of virtualstefan. I think i found it in his blog.
meizhel04 wrote on Dec 6, '07
kuya, same prob din nung samin.. san ba nkukuha un?.. para maiwasan ko na ung virus na yun..
puretuts wrote on Dec 6, '07
infected usb. nang costumer. okay lang naman dahil naka deep freeze.
alykaram wrote on Dec 10, '07
thank you sa anti-virus.. hope it will work..:-)
roelhcruz wrote on Dec 10, '07
First of all e i just want to greet lahat ng nasa blog na ito ng nabuhay! Bilib na bilib ako sayo puretuts at kay virtualstefan13 dhil nafigure out nyo pano tanggalin ang mga hinayupak na virus na "i love my peanut" at yung imgkulot. Minsan sa lang ako mapabilib and ito ung mga minsang pagkakataon na yun! Hanep!daig nyo pa ung mga antivirus na software,dapat i hire nila kau...bilib ako dahil anggaling tlaga ng pinoy at proud ako na maging isang pinoy dhil sa mga tulad nyo...salamat sa solusyon nyo and GOD br Praised..nga pala "I LOVE MY PEANUT" virus ung naka infect sa akin hehehehe... God bless!
puretuts wrote on Dec 10, '07
Thanks but i am not the creator of the AV. I think it is virtualstefan. i just posted his av. i have also posted the original link of his blog.
marymaiden wrote on Dec 11, '07, edited on Dec 11, '07
safe ba tlagang gmitin ang anti imgkulot?natatakot kc ako bka anong effect nito..
virtualstefan13 wrote on Dec 12, '07
kung duda ka sa effect nyan... i suggest you do it manually as what is stated above. if you know how a batch file works, then you can inspect the commands in the remover.
marymaiden wrote on Dec 12, '07, edited on Dec 12, '07
hndi nmn sa duda naninigurado lng na wlng msamang effect po..tnx 4 d anti virus!
heheheehe
defilermound wrote on Dec 12, '07
mga sir thanks s AV, muntik n ko mag re4mat, maraming salamat!!!
puretuts wrote on Dec 12, '07
so far wala naman akong notice na bad effect.
virtualstefan13 wrote on Dec 12, '07
^_^
marymaiden wrote on Dec 12, '07, edited on Dec 12, '07
ah ok..thank you po..marami po tlgang salamat!!!!
wla bang kailangan n other anti virus ito?
jillpardo wrote on Dec 13, '07
Hay thank you talaga! This was really helpful!
puretuts wrote on Dec 13, '07
ah ok..thank you po..marami po tlgang salamat!!!!
wla bang kailangan n other anti virus ito?
it can be remove by other anti-virus there will be a large possibility na hindi mo ma access ang mga infected drives kahit wala na ang virus.
nerujband wrote on Dec 13, '07
hi! my problema po.. yung computer ko kasi medyo na apektohan yata ng virus.. ewan ko kung ano... symptoms ay, dinisable po yung taskmanager at registry... hingi lang po sana ng konting tulong... HELP! thanx....
Comment deleted at the request of the author.
marymaiden wrote on Dec 14, '07
it can be remove by other anti-virus there will be a large possibility na hindi mo ma access ang mga infected drives kahit wala na ang virus.
you mean po hndi ko na mgamit ang infected drives if i use other anti virus?pro if i will use the anti imgkulot ok lng?i mean i can still access w/ the infected drives?
->paano po ba ipa run yung anti imgkulot?
puretuts wrote on Dec 14, '07, edited on Dec 14, '07
you just need to double click the file at tatakbo na iyon. yung na notice ko before it can be remove by some AV but it cause a log on log off error sa USB or drive (infected) mo. Although may manual way to remove this. the remover is most convenient.

This does not happen with the updated version of the remover by virtualstefan.

By the way you can still open the drive thru the task bar. Punta ka lang sa task bar tapos piliin mo lang yung drive.
marymaiden wrote on Dec 14, '07
ah ok..tnx po tlaga..tnx 4 da info... God Bless you!
axscode wrote on Dec 20, '07
www.philsys.org po.. para sa lahat na pinoy.. salamat po!
cnarf80 wrote on Dec 26, '07
hi! hingi lng po sana ako ng tulong dito.. i also have a problem about the "I LOVE MY PEANUT" virus.. i tried to access the link posted in here, however, i can't seem to open the site that u were referring to.. everytime i tried, it always says FORBIDDEN and you don't have permission to access... i might have missed something in the process.. please help! thanks!
puretuts wrote on Dec 26, '07
you will find the file in my post its an attachment to the post just download it here if you cant access the site.
geekdoll wrote on Dec 27, '07
i have a question for virtualstefan13,

is the ff instruction also applicable to peanut virus??
if we remove the virus manually should we replace "imgkulot" to "peanut"?

thanks


***************************************************
2. Kill the process wscript.exe in the task manager.

open command prompt
then type the ff:
cd[backslash](i cant display backslash in this blog engine,T_T)
cd windows/system32
attrib imgkulot.* -s -h -r -a
attrib autorun.inf -s -h -r -a
del imgkulot.*
del autorun.inf



for the individual drives.
go to the root drive.
d: <---example only
cd[backslash](i cant display backslash in this blog engine,T_T)
attrib imgkulot.* -s -h -r -a
attrib autorun.inf -s -h -r -a
del imgkulot.*
del autorun.inf


restart PC

***************************************************
grabe talaga ang perwisyo ng peanut na yan.. kakainis!
kung sino man ang gumawa niyan sana makarma ng husto
ang dami2 ng naperwisyo ya siguro and saya2 nya na ang dami ng tao ang naapektuhan.. mga walang magawa sa buhay..
jaguarbourne wrote on Dec 27, '07
i think instead of attrib imgkulot.* -s-h-r-a and attrib autorun.inf -s-h-r-a you should target the peanut virus file... then del mo rin afterwards kung anu yun.. im not sure yet kung anung name ng virus file na yun coz i havent got it in my system yet... hope i helped
virtualstefan13 wrote on Dec 27, '07
hello geekdoll..

yes, you will just have to replace "imgkulot" with "peanut"
peanut works exactly as imgkulot...

alternatively, you can execute this fix, http://www.fileupyours.com/files/111419/anti-IMGkulot.zip . it has a p[eanut remover inside.

I recently found that james.go.dll, bungotun, kulitot are some of the variants of imgkulot.
sad to say, some of the AV arn't detecting thise imgkulot modifications.
Comment deleted at the request of the author.
Comment deleted at the request of the author.
virtualstefan13 wrote on Dec 31, '07
you can try this.

http://www.fileupyours.com/files/111419/james.go.dll.zip

but I will not guarantee you that this is 100% working. I have not experienced or seen a james.go.dll virus. but this remover is safe to use
richelleeargones wrote on Jan 4, '08
hi i need help. panu po ireremove yung Sub7@Chatx.net? para din sya yung imgkulot at yung peanut thing? please help. thanks.
virtualstefan13 wrote on Jan 4, '08
sa mga nakita ko sa net about sub7@chatx.net malware. sabi nila TAGA LIPA ARE variant daw yun. no confirmed though.

sa pagkakaanalyze ko sa post ng site na to, imgkulot variant sya
http://jreflores.blogspot.com/2007/12/sub7chatxnet.html

try mo muna to. baka mag work...
http://www.fileupyours.com/files/111419/mma.zip

andoiside wrote on Jan 5, '08
very helpful, tnx d2 bro, n remove ko na ung "i love my peanut" sa pc ko, tnx and more power.
Comment deleted at the request of the author.
never721 wrote on Jan 7, '08
tnx a lot for that vurus removal
batas770 wrote on Jan 9, '08
it worked!!! nice!!! thanks a lot virtualstefan13 and puretuts
is it ok to post a link in my blog to this site? cuz some of my friends are suffering from the very same problem
kjc168 wrote on Jan 21, '08
meron po kayo anti-IMGINSOY?
shengton wrote on Jan 25, '08
Great removal tool dude! :)
tinaykc wrote on Jan 26, '08
Thanks! got rid of the peanut-thing in no time! =)
jomarzzz wrote on Jan 27, '08
guys paano bang e remove ang AUTOIT.BA na virus kakainis talaga. pls help tnx
Comment deleted at the request of the author.
hi how are you
mutyy wrote on Jan 29, '08
yunashley wrote on Feb 6, '08, edited on Feb 6, '08
hindi lang imgkulot or iluvmypeanut..kundi my jamesgo.dll pa! inedit lang yung name pero actually version din ito ng imgkulot. Kkakainis na jamesgo to. pati pc ko sa office meron nito. taga-iloilo pa nmn ako at yung imgkulot originated in iloilo city. pagnakita ko ang may gawa nito... hayy.. naku! sasabunutan ko talaga xa..mabuti na lang at may mga taong concern sa kapwa nya at ng share ng knowledge kung panu mkuha ang bwisit na worm na to. thanx sa n u! =)
beejay1689 wrote on Feb 6, '08
meron po ba kayong imgINSOY remover?...
puretuts wrote on Feb 7, '08
thanks sa imgkulot remover and other info bro!!! muntik nako magreformat..... been using NOD32 nadedelete nya un imgkulot pro makulit talaga... after madelete e di ko na maopen un harddrives and removable disk... 'till next time. salamat!
i think i have a post in my blog regarding drive that cant be opened specially after virus removal
diannebaby wrote on Feb 10, '08
hi there...please help me in this virus i love my peanut...am new on technology. bumili ang mama ko ng PC para sa mga project and thesis ko..ngulat n lng ako when ill right click my hardware instead OPEN ay I Love my peanut... please help me step by step how will i remove that virus. honestly d ko tlga alam magremove technically. well if may guide lng ako paano/procedure baka maayos ko.. to Sir puretuts please help me or any1 here...

hoping,
dianne
diannebaby wrote on Feb 10, '08
i download already the antiimagekulot den i double click it...ganun p rin or mali lng pag process ko...or please email me at diannebaby_06@yahoo.com.. hope any1 here would help me...please
reighn181 wrote on Feb 11, '08
ask ko lang po kung may pang tanggal sa imgINSOY.. pls help naman po. heres my e-mail add. robert.piedad@gmail.com...
reighn181 wrote on Feb 11, '08
hi po.. pa help naman po. may pang tanggal po kau sa imgINSOY.. pls help me naman po. heres my e-mail add.. robert.piedad@gmail.comn
kyuuketski wrote on Feb 12, '08
@reighn: imgINSOY is merely another modification of imgKULOT or the peanut virus. the downloadable remover above is effective against insoy as well, so i suggest you DL it now and run it.

@dianne:
what i did was basically this:
run (double click) remover-imgkulot
press any key (first instruction)
press any key (second)
enter ONLY THE LETTER where WINDOWS is located (in my case, c)
press any key
reboot

i hope the virus is really done for though. :D

@puretuts: thanks for this!!
diannebaby wrote on Feb 13, '08
thank you so much to you kyuuketski. the i love my peanut was able to remove...again thank you so much....may God bless you and your family always...

in additional:
if I install deepfreeze in my PC does i love my peanut wil not abble to infect my PC anymur coz my flash drive is also affected and am not using it for now...is it safe to use and reformat my flashdrive while my PC is freeze?
am afraid if ill plug in my flash drive to my computer and reformat my flashdrive,might my computer affect by the i love my peanut...

again, thank you and more power.
reighn181 wrote on Feb 13, '08
salamat po sa lahat.. ask ko lang po kung anu nag cocost ng biglang paglog in mo sa YM tapos biglang nawawala.. maraming salamat po ulit
silvernebula16 wrote on Feb 13, '08
salamat po. i was actually freakkin out for a while. thanks for your help. XD
diutay wrote on Feb 14, '08
Hi. Thanks for the help with the i love peanut virus. We downloaded the file from your site. We now have another with our ym sending links (seems like viet) to those who are in our ym list. It sends a file (hin... something) to them. I tried the antivirus from virualstefan which I got here but the moment we open it, it abruptly closes. Do you have any idea how this can be addressed? Thanks.
jobowarren wrote on Feb 14, '08
Sir may prob kami. naglolog off na comp namin. what can i do to fix it? and isa pa after removing imgINSOY we found another virus i think... AZKABAN.BAT,AZKABAN.VBS, and another can't remeber. help? thanks you people.
diannebaby wrote on Feb 14, '08
again ask lng po ako if its safe to use DeepFreeze? does any virus wont able affect my computer? my DeepFreeze is version 6.

hope any1 would able to help me..thanks
dogg08 wrote on Feb 15, '08
just now nagkaroon dn ako ng mma.vbs na virus.download ko muna nod32 and pray hard na d ako mg reformat.hehehhehe.tnx so much sa mga info
puretuts wrote on Feb 15, '08
bad trip yang mma. encountered it several times already. kung na infect na mahirap ma tangal. yung mga mga memory card na infected nito hindi naka delete or add nang files hindi ka rin maka format nang memory card. Yung ginawa namin sa camera n-reformat.

hindi ka rin maka pag safe boot nito.
puretuts wrote on Feb 15, '08
again ask lng po ako if its safe to use DeepFreeze? does any virus wont able affect my computer? my DeepFreeze is version 6.

hope any1 would able to help me..thanks
safe naman ang deep freeze. what it does is that it reset your computer evertime you boot to the state it was in.

the problem is yung mga files that you have save. will also be gone. so my advice it dont deep freeze all the hard drive. leave one drive na walang deep freeze. doon mo save yung mga files mo.

Sa game walang save point if you install it sa deep freeze na drive c.
Comment deleted at the request of the author.
dogg08 wrote on Feb 15, '08
million thanx to puretuts and virtualstefan13.thank u so much guys.thank u thank u thank u.
eriosumi wrote on Feb 19, '08
good am po sir bak pde mkahingi nung antti imginsoy salamat po sir God Bless! email ko po tenks
eriosumi@yahoo.com
b1gbadw0lf wrote on Feb 21, '08
gud am maam and sirs... just got online and researched for azkaban.vbs and its crew i.e. azkaban.reg, azkaban.bat, autorun.inf, then i found this site... read replies on removal... kasi di ma detect ng avg7.5... tried to disable ang registry entry niya... pero bumabalik (goto c:\ type dir /ah /p you'll see those files.. usually wala yan... kahit iforce delete c:\del azkaban.* /ah /f ayaw din... balita ko panggulo lang tong virus na to... which is when you click open a drive another window opens.. ito ang characteristic niya... editing its entry in the registry will create the imginsoy window. try typing in c:\type azkaban.bat or c:\type azkaban.reg the instructions for the virus are there.. im not into the programming biz but you can figure it out by viewing the instructions shown there. So far... the ONLY trick i do to remove the virus or trojan is use system restore. Restore your PC to an earlier date.. just try to figure out when was the last date an unknown USB or any other suspected data carrier was plugged in your pc. the only disadvantage using system restore is your valuable data stored in your hard drive.. some may be retained but some will disappear.. even if your transferred 'em to another backup disk (except for external HDD's)... another trick is go to windows folder then arrange data by details, browse through the files with an application extension (*.exe), you may find some trojans "housed" there with funny or weird names... delete them or if you're not sure, change the extensions (*.bak or something)... another trick for finding 'em if avg doesn't is go to task manager (if it does not open... you maybe have another gremlin in your system.. same if you go to tools/folder options/hidden files and you choose "show hidden files" and it doesn't change once you return to see that option... then you maybe have another gremlin in there.heheheheh if you have "folders" that return even after you delete them... go to task manager... go to the processes tab look for that folder name... take it out.. then delete the file in the windows folder... itong mga virus or trojan nakakainis.hehehehe nakakapagod din mag reformat ulit.. matrabaho eh. so usually system restore does the trick.. (for me at least).. but if you've got extra for it... go for norton antivirus (original ha!) kasi magupdate din yun ng virus database niya... so you really have to pay... AVG at least is free but hindi niya "makita" lahat.hahahaha sa mga USB drive na once you right click them for a popup option then you get more than 1 "open" or "autoplay" options... trojan din yun. don't double click on the drive.. go for explore.. but i think dun pumasok ang azkaban sa aking system. I'm just another average user who'd just like to give some tips that helped me (at least) by doing those i mentioned above. For those usb drives na merong mga gremlins.heheheheh copy your data... then reformat the usb drive... that'll remove those "unwanted guests" in there... kasi after ma scan and remove yung files sa usb drive.. mapapansin mo na andun pa rin sa popup options and "extra" options (i.e. open, autoplay, etc)... i maybe wrong for some things i have said above.. but they worked for me anyway... i'd be glad if there are some corrections. i'm just trying so save my data.. since mahal pa ang blu ray burners.hehehehe anyways thanks.
kampus2003 wrote on Feb 21, '08
Huh, finally I found something that will solve my problem... I've used a lot lot of search engine eh walang maibigay na info about sa imgINSOY... at last nung nagsearch na ako sa Google, 'BOoOM' sa wakas meron na ako nahanapan. But sad to know na Pinoy pala ung gumawa nito, Letse... pero at least may mga maasahang mga pinoy rin na tulad nina puretuts and virtualstefan13 na nagawan ng solusyon ung pesteng virus na un... Maraming maraming salamat sa inyong dalawa... good work mga BRO... keep up the good work.... :-)
krid69 wrote on Feb 21, '08
dre ask ko lang kung may removal kyo ng azkaban?? makulit kasi tong virus na toh!
krid69 wrote on Feb 21, '08
par meron nmn kayong removal ng azkaban post nyo nmn po! thanks! kahit manual...:P
kampus2003 wrote on Feb 25, '08, edited on Feb 25, '08
A while ago my nagpaopen sa akin ng USB nya and to know that my PC was again infected by imgINSOY, what the hell is this virus... I tried again to use the imgKULOT remover eh di sya gumana... heheheh, after a couple of trying the remover I was able to know na may mali pala me kasi dun sa instruction na kung saan u need to enter the drive letter where the windows or OS was installed eh ang ilinagay ko is C:... mali pala un dapat ang ilagay ko lang is C kasi pag linagyan mu sya ng semicolon di gagana ung remover... Hehehe la lang comment lang poh...

- Matanong ko lang, Guys, yung imgKulot ba at ung imgINSOY magkaparehas... ?
Comment deleted at the request of the author.
mastamarts wrote on Feb 28, '08
thanks you very plenty!!! nagdalawang isip pa ko sa simula, but inisip ko ganun den naman format ko den to pag di nag work, eh kaso nag work heheh!! di na tuloy ako mag format, thank you talaga ha!!
chisaianna wrote on Mar 3, '08
thank u dun sa james go remover!! pro my another prob pc nmin.naencounter nyo na b ung bglang nwawala ung address and toolbar?..lgi nlng kc kmi ngdodownload ng toolbar kc evry few hours nawawala khit na ilock pa ung toolbar...is there anything we can do about it? sna po reply kau..slamat!=)
ohmaya12345 wrote on Mar 3, '08
hello kuya... how are u? my pc was been infected of james go virus... how could i remove it? should i reformat my pc? or u could help me with it... thanks a lot... \Godbless po
ohmaya12345 wrote on Mar 3, '08
halo mr.!!! help me to heal james go virus... it was infected through mycousin pc... huhu kawawa ang pc ko...
Comment deleted at the request of the author.
roychoco wrote on Mar 4, '08
salamat din pare, malaking tulong itong post mo
diannebaby wrote on Mar 5, '08
hi there this my situation ay kakaiba, its bout my speed connection. well i just gathere info how to resolved it and could any1 help me...

am using smart bro connection but its very annoying that how many times i call the customer service bout my speed problem but still i encountered a very turle speed. thats why i try to search tru google how or anyone could able help me how to boost my speed.

i hope there someone here could able to help my situation where the fact only smart bro_KEN are only available in my area...

please help me…im so tired waiting to load the page everytime i browse.please…

thank you and more power.

dianne
diannebaby wrote on Mar 5, '08
and one think i had this software of deepfreeze enterprise i install it unproperly cause after i click the DF6Console i click DF6Wks which automatically freeze my computer without creating a password. when i try to thawed it it wont able to access. until now my computer still freeze. i try several times to thawed it but i failed.. please help me how will i able to unfreeze my comp again.

thank you and thank to this blog

more power

dianne
puretuts wrote on Mar 6, '08
Shift + double click the deepfreeze icon. deep freeze menu will open. you can now create your password. Baka din you deep freeze all of your hard disc. What i do is that i only deepfreeze drive c, where the system files are located.
diannebaby wrote on Mar 7, '08
tnx a lot mr. puretuts...that wat i did always...BUT still i cant locate the menu to change a new pass... to have an idea i send you a print screen image..

Image Hosted by ImageShack.us


can u tell me sir what wil ill do now cause all the drive is being freeze...i cant ale to save now...
gnew03 wrote on Mar 8, '08
thank you so much! imgkulot has been removed on my pc! its been a week that im trying to remove it...salamt tlga..more power! til next time...=)
rosalie18 wrote on Mar 8, '08
ei puretuts can u help me?
rosalie18 wrote on Mar 8, '08
please help nyo poh ako ang virus poh na na encounter ko ay ImgInsoy pareho din poh nung asa taas nga lang asa local drive C: ad D: ko poh
rosalie18 wrote on Mar 8, '08
pls poh response poh kau sa prob ko ayaw ko na poh reformat ng pc ko wawa na hard disk ko ='c
kalokohan33 wrote on Mar 11, '08
i need help!!!! How can i remove the "open with" window? everytime i click a local drive (for example D:) the "open with" window appears. how can i fix it? thanks.
kalokohan33 wrote on Mar 11, '08
i need help!!!! How can i remove the "open with" window? everytime i click a local drive (for example D:) the "open with" window appears. how can i fix it? thanks.
jimvinuya wrote on Mar 11, '08
Hi. I encountered the same problems as you have with script virus (ImgINSOY) although I haven't read all everything up here. To solve the problem I install and run the remover. Sa una it worked with my removable drive but lately it got infected again. The problem now is, the remover cannot detect the location of the infected removable drive. I dont know if this problem has been discussed somewhere in this forum kaya lang i didnt have time to read all of the entries. Kaya, please I am summoning all you computer godz and goddessez out there to help me. Advanced thanks.
kalokohan33 wrote on Mar 11, '08
i need help!!!! How can i remove the "open with" window? everytime i click a local drive (for example D:) the "open with" window appears. how can i fix it? thanks.
kalokohan33 wrote on Mar 11, '08
help, anyone??!!
kalokohan33 wrote on Mar 12, '08
any suggestions?
puretuts wrote on Mar 13, '08
try removing the autorun.inf in your flash drive. its a hidden file.

you may check my blog. i think i posted something for this problem. this usually happens when a virus is remove but the autorun is still in the usb, it will look for the missing file (the virus).

for the meantime you may use the taskbar and choose the drive letter. tapos change mo yung folder option to view hidden file and protected files, para makita yung mga files.
kalokohan33 wrote on Mar 13, '08
thanks a lot! you're my hero!!! God bless.
greataerg wrote on Mar 14, '08
thanks so much. remover was very helpful. the imginsoy thingy is no longer there. =]
vicmanlapaz wrote on Mar 16, '08
Paano po tanggalin yung azkaban.vbs, azkaban.reg, autorun.inf.

Ganun din po ba?
puretuts wrote on Mar 16, '08
havent encounter this one yet, but you may try this:

boot is safe mode. --> when you start you pc press F8 (at least in most computers) ---> choose safe mode (i am assuming that you can still boot in safemode, there are viruses that disable booting in safemode); if you cant boot in safe mode try system restore (some virus may also disable this)

IN SAFEMODE
1. Do not open any folder or drives. Go to dos prompt type the following:
del c:\autorun.*./f/s/q/a -- for drive c; for the other drives just substitue c with the appropriate drive letter. press enter
do this in all drives and usb flash drives/portable HD.
2. click my computer, go to tools, click folder option, click view, uncheck hide protected operating system files check show hidden files and folder.
3. Do this in all the drive (I am assuming that the autorun.inf have been deleted already and the pc is running in safe mode)
choose a drive right click and choose explore see if you can find azkaban.vbs, azkaban.reg. delete it. do this in all the drives.

Hope this well work.
nefar007 wrote on Mar 17, '08
help naman sir
pano tanggalin po ung azkaban.bat
un po kasi ang first na nagloload sa startup.
thanks
vicmanlapaz wrote on Mar 17, '08
with all due credit to puretuts, i simply replaced all instances of kulot.vbs, kulot.bat, kulot.reg, with azkaban.reg, azkaban.vbs, azkaban.bat.

Works for me!
yammy08 wrote on Mar 20, '08
Mr. Titus ano kya solution dito? kc wla ng imgkulot or imginsoy yung drive. Pero pgopen ko yung drive ngoopen na nman ng new window n meron ibang online games d gumagana dhil dun sa promblem na yun! Hope ui can help me po. Tnx! God Bless
amberaven7 wrote on Mar 21, '08
hi! thanks for the remover. i think it worked.
cheeneestar wrote on Mar 21, '08
thanks! it really worked!
mrscarlin wrote on Mar 21, '08
thanks so much for the remover, but i still have the azkaban virus and i cant remove it, pls tell me what to do, thanks again
yammy08 wrote on Mar 21, '08
How can u remove azkaban.bat po kung nsa windows folder na pa sya! Tnx!
kentjc24 wrote on Mar 22, '08
yan rin ang prob ko! azkaban.bat & azkaban.vbs sa C:/, D:/, at sa windows! panu?
xhaldy wrote on Mar 23, '08
Salamat sa Anti IMGKULOT naayos n pc q...ehehehe
xhaldy wrote on Mar 23, '08
sir puretuts.. salamat sa Anti Imgkulot pero tanung q lang kung papano nmn magremove ng imgIngsoy virus sa USB
puretuts wrote on Mar 23, '08
xhaldy said
sir puretuts.. salamat sa Anti Imgkulot pero tanung q lang kung papano nmn magremove ng imgIngsoy virus sa USB
when you run the remover make sure that the usb in connected to the pc.

manual
or you can delete the autorun.inf.
in dos prompt type: just change the drive letter to the proper designation of your usb.
ex del e:\autorun.*./f/s/q/a

after deleting, open the drive (i suggest you use the right click and explore or use the address bar sa taas). change the option to allow to view hidden and system files. manually delete the imgkulot file.
xhaldy wrote on Mar 24, '08
salamat po..
candy68 wrote on Mar 26, '08
pare salamat..nakka2long talaga ung remover mo..akala ko reformat na..astigggg!!!!!!!!!!suport local bands
virtualstefan13 wrote on Mar 28, '08
sir puretuts...

baka gusto mo i update yung fix....

eto link:

http://www.fileupyours.com/files/111419/anti-IMGkulot.zip
aldrie wrote on Mar 28, '08
Please help.. after i removed IMG Kulot virus, i no longer couldn't open my task manager. It says " it has been disabled by the administrator",.. what should i do?
aldrie wrote on Mar 28, '08
please help
virtualstefan13 wrote on Mar 28, '08
try using this Removal Restriction Tool

http://www.fileupyours.com/view/111419/RRT.zip
puretuts wrote on Mar 29, '08
sige virtualstefan thanks.
elmorvita wrote on Mar 29, '08
hello, pwede po magpatulong na encounter ko yung IMGINSOY tapos sinundan ko na din yung mga step na sinuggest mo => medyo nagiging ok na yung laptop ko pero pag nagoopen ako ng mga folders na eencounter ko pa din yung "your computer was infected by unknown trojan, It's dangerous for your system (Critical files can be lost ) ! click ok to download the antispyware program to clean your system" tanung ko lang kung papaano tanggalin itong error na to => really appreciate your response
puretuts wrote on Mar 29, '08, edited on Mar 29, '08
hello, pwede po magpatulong na encounter ko yung IMGINSOY tapos sinundan ko na din yung mga step na sinuggest mo => medyo nagiging ok na yung laptop ko pero pag nagoopen ako ng mga folders na eencounter ko pa din yung "your computer was infected by unknown trojan, It's dangerous for your system (Critical files can be lost ) ! click ok to download the antispyware program to clean your system" tanung ko lang kung papaano tanggalin itong error na to => really appreciate your response
there might be another spyware in your system.

be careful sa pagdownload nang spyware over the net na hindi mo alam. meron kasing ibang antispyware na spyware pala. tapos you have to pay para matangal hindi ko rin alam kung matatangal siya. makulit ito. happened to me once, while trying to find a cure of a certain virus. turned out that the antivirus that i downloade over the net is actually a virus.

Ano pala AV ginagamit mo?
elmorvita wrote on Mar 29, '08
symantec=>
virtualstefan13 wrote on Mar 29, '08
tagal ko na rin pala d nakapunta d2 ah.... dami mo na pala natulungan puretuts... hehehehehe..

btw, eto pa pala yung update ng fixes...
1.jpg
nhellgarcia wrote on Mar 30, '08
haYz! bumalik nren ung mga virusbusters ehhe!

about the img insoy worm
hinde ko po siya msdo mintindihan
n DL kow n po ung ANTI IMGKULOT etc...
tpoz tinry ko po xia tpoz di ba po may nklgay dun na file name w/out extension na text bar nilagay ko po dun ay C: tpoz nun ay D:
an probz po pagkatpoz ko i-fix my computer nag eerror "RUN TIME ERROR" po okz lng po b un?
tpoz po nun xbi xunod n gwn ay ung sa task manager ung wnscrip.exe nung una po ctrl+alt+delete kow po nandun xa mga processes tab ung wnscrip.exe kzo ende ko po siya i-stop kze po inuna ko ung xa anti-imgkulot den nirestart kow po ung pc tpoz nung ctrl alt delete kow n wla na dun ung wnscrip.exe tpoz pmunta n kow xa command prompt den tinyoe ko po ung andun xa thread kaso po xabi "cant find imginsoy.*"(imginsoy po kze ung word n peste sakin eh)

pano po ba?
kze kpag niright click ko po ung drive c at d kow or dinouble click ko lalabas ung azkaban.vat at azkaban.vbs tpoz access is denied...
AVG po ung anti virus ko,den kpag may threat po ung img insoy niallagay ko lng po sa VIRUS VAULT
ok lng po b un?
mraming salmt po! ^^, more powers! nd g0dbleSs!
nhellgarcia wrote on Mar 30, '08
img insoy
po ung akin salmat po!
virtualstefan13 wrote on Mar 30, '08
kuya, imginsoy yung ilagay ny0 sa txtbox.

Iba ba yung imginsoy tsaka azkaban?
nhellgarcia wrote on Mar 31, '08
dun po sa anti image kulot? ay kala ko ung drive tpoz po anu po gagawin ko?
kua may YM po b kau jonellgarcia po pa add mraming salmt po mrami po akong gustong itanong
xa mga katulad niyong idol ko!
hehe!
tpoz po anu gagawin ko?
paslo2 wrote on Apr 1, '08
GOOD
paslo2 wrote on Apr 1, '08
Dv mayron ngayun yung auto shut down ang pc ones na open mo ang Drive,, halimbawa ang drive d tapos biglang shutdown ang pc,,
puretuts wrote on Apr 1, '08
i encounter one. after opening the usb drive, it will close down.
paslo2 wrote on Apr 2, '08
anung Virus Ung Ganun nag sshutdown ang pc Pag nag open ka ng drive?
reighn181 wrote on Apr 2, '08
sir. ask ko lang po sana kung panu matanggal or anong pwedeng anti virus na pwede matanggal ang cutiemonkey.. thanks for you're help and kindness.. my e-mail ad is robert.piedad@gmail.com
virtualstefan13 wrote on Apr 2, '08
sir puretuts,
pakikuha nalang muna yung fix na updated.. may bug pa...

-----------

for other imgkulot variants pede mo edit para mag work..

for example:
IMGinsoy... yung filename nya is azkaban so you can replace 'imgkulot' with 'azkaban'. to Simplify use notepad's REPLACE ALL Feature...

Goodluck to all
puretuts wrote on Apr 2, '08
OK doki.
kyuosuke wrote on Apr 6, '08
Kool to, makakatulong to dun sa kakilala kong infected ng imgkulot (kulot di sya) na yan. :D
diannebaby wrote on Apr 9, '08
hello,

sir puretuts and virtualstefan... i have a big problem about this very annoying ust scandal.avi. my computer is very slow performance because of this ust scandal.avi... nainfected o ung 8 computer nmin sa opisina... at saka ung mga us nmin ay infected n rin.. pls am begging again for help... please help me how to remove this ust scandal in my pc and usb... or email me at diannebaby_06@yahoo.com. d ako makaformat kc ang dami naming files na very important. hope may ibang paraan matanggal etong virus na to.


please send me the procedure how to remove it...


thank you and more power..



dianne

puretuts wrote on Apr 9, '08
hello,

sir puretuts and virtualstefan... i have a big problem about this very annoying ust scandal.avi. my computer is very slow performance because of this ust scandal.avi... nainfected o ung 8 computer nmin sa opisina... at saka ung mga us nmin ay infected n rin.. pls am begging again for help... please help me how to remove this ust scandal in my pc and usb... or email me at diannebaby_06@yahoo.com. d ako makaformat kc ang dami naming files na very important. hope may ibang paraan matanggal etong virus na to.


please send me the procedure how to remove it...


thank you and more power..



dianne

paslo2 wrote on Apr 11, '08
panu eriformat ang toshiba laptop?
puretuts wrote on Apr 11, '08
paslo2 said
panu eriformat ang toshiba laptop?
You will need and installer for the OS, windox xp (home or pro) and vista or even linux.

Some laptops now have installer disc included for those na pre installer. Yung iba may recovery disc.
diannebaby wrote on Apr 11, '08
sir tuts,

ask lng po ako wla po ba auto removed ng ust scandal virus.. asar po ako eh.. earlier i tried to to run the remover of the ust scandal but, when i try to open the Folder options on the tools i cant find it to show the hidden files. see i attached: Image Hosted by ImageShack.us




and also sir, i hate this other virus other than ust scandal or i dunno it was just the same virus of ust scandal it was "New Folder" when i double click it it eventually minimize and gone and cause also "hang" of my pc. please sir help me to remove this things. and how i will locate the folder options. nahihirapan na po kc ako eh.. ayaw po kc nmin e reformat ung pc sa opis and i believed that u can help me. and pls how i can removed the "New Folder". cause lahat ng pc sa opis ay hindi connected ng internet network.

http://img406.imageshack.us/img406/1371/nofolderoptionsri2.jpg


again i would like to ask help... please help me.

thank you and more power.


dianne



paslo2 wrote on Apr 15, '08
mam try mo slave sa mayrong folder option,,
paslo2 wrote on Apr 16, '08
install ka ng windows config para ma inable mo ang folder option,,
yann3 wrote on Apr 17, '08
hello! for some time now, everytime i turned on my computer 2 windows would pop up that a suspicious script had been detected and stopped. i thought that since they had been stopped, my PC was safe. but lately, whenever i save some files to my flash disk and attach it to a different computer, that computer's antivirus detected some virus/worm. those suspicious scripts happen to be IMGKULOT and TTMS32. And on top of my internet explorer browser, there was a TTMS NAA NA DIRI, DON'T WORRY I'M NOT A CORRUPT LIKE YOU! wriiten

after i downloaded the anti imgkulot remover and restarted my computer, those pop-up windows didn't pop up anymore--both for imgkulot and TTMS32 scripts. i was just wondering... are they the same? or do i need to download a different remover for TTMS32?
thanks a lot 4 your help!
alynna1020 wrote on Apr 19, '08
Here's one tool you can use to remove those pesky viruses....including azkaban and ust scandal........just click on the link and download the tool

http://www.precisesecurity.com/tools-resources/adware-tools/flashdrive-worm-killer/
alynna1020 wrote on Apr 19, '08
BTW....I found the azkaban virus attached to my digicam.......glad that I just don't click on "Get all pictures" and instead, check on them one by one.....thus, the azkaban files are not included and just left sitting in the memory card of the digicam......Finally, I had it removed when I used the tool I got from the link I just posted previoue to this message. Now, my computer as well as my digicam is virus-free! It also helps that I have NOD32 as my anti-virus program as it can detect the latest viruses as soon as they come in circulation. Aside from that, NOD32 is a space saver unlike Norton which occupies almost half of your computer space!
kalokohan33 wrote on Apr 21, '08
hi! how can i remove "W32.Myzor.FK@yf virus"? everytime i try to open IE, the page automatically displays (for a second) about blank and then redircts the page to the internet security page saying the computer is infected and the virus infects the .exe extensions. thanks guys.
Comment deleted at the request of the thread owner.
kalokohan33 wrote on Apr 24, '08
hi! how can i remove "W32.Myzor.FK@yf virus"? everytime i try to open IE, the page automatically displays (for a second) about blank and then redircts the page to the internet security page saying the computer is infected and the virus infects the .exe extensions. thanks guys.
tazzytashi wrote on May 29, '08
thanks po!
Comment deleted at the request of the author.
adolfsison wrote on Jun 7, '08
thank you po nakasave ako ng format , tnx very much
marsambo wrote on Jun 12, '08
You're a lifesaver.

Many thanks! :D
mlgorgeousj wrote on Jun 18, '08
thanks to this blog... :)
billydoftn wrote on Jun 20, '08
I downloaded a movie "Batman Begins DVDRips Eng" and it won't play or let me remove it. When you try it says "Cannot.....other program or person is using it". Could this be the IMGKULOT virus? Have you heard of it Mr Puretuts or Mr. Virtualstefan? Would be mighty grateful if you know of a fix.
resingan wrote on Jul 15, '08
sir patulong sa monderb virus. diko matangal eh
Comment deleted at the request of the thread owner.
madummy wrote on Dec 8, '08
Hello sir, meron lumalabas na M•ä•R•Ç † m•Á•ÿ•Ñ•â•R•Ð sa internet explorer ko. At merong note Marc Maynard was here! |
| aka Sub7(Irc.ChatX.Net) |
| |
| Davao City, Philippines pano kaya matangal eto?
dnaivs wrote on Jan 17, '09
thanx for your anti-IMGkulot, it works!
dnaivs wrote on Jan 17, '09
hi! its me again. just want to ask if u know scvvhsot.exe? it appears everytime i turnd on the pc. ive tried many kinds of antiviruses, but it failed to remove it. hop u can help me. God Bless! thanx!
onofre3 wrote on Feb 24, '09
Hi! tagal na ng thread na ito. Im also infected with the I Love My Peanut virus but cant download the imgkulot file. Can anyone upload the latest? Thanks. Dont know what peanut does pero its irritating knowing you have it in your pc.

Noy
absynthefairy99 wrote on Jun 12, '09
help...my laptop and extra hard drives are infected with I LOVE MY PEANUT...HOW DO I REMOVE THIS?
diannebaby wrote on Jun 20, '09
hello guys and to sir puts... pls help me cnu may idea paanong itanggal itong virus na to called "ksp.jpeg.dll.vbs"... pls email me at diannebaby_06@yahoo.com.. again ty and more power...
itsfixed wrote on Apr 5
This article is helpful for removing imgkulot virus. Here are explaining few tips to removing virus if you will use step by step this tips you can remove virus definitely. Thanks to share this post.
Computer Service
Add a Comment