September 07, 2010, 09:01:41 AM *
Welcome, Guest. Please login or register.

Login with username, password and session length
Join the UPV Community
News:
 
   Home   Help Search Links Login Register  
* *

Recent

Online

9 Guests, 0 Users
Upvisayas Dot Net

Pages: [1]
  Print  
Author Topic: IMGKULOT, I LOVE MY PEANUT  (Read 1185 times)
0 Members and 1 Guest are viewing this topic.
Rex
Administrator
*
Offline Offline

Posts: 1151



WWW
« on: November 22, 2007, 10:04:49 AM »

You might be surprised but these malicious and very annoying scripts originated from Iloilo City. That's why antivirus programs took a while to be able to detect them. They are not exactly viruses. The I LOVE MY PEANUT script which recently started popping up is just a modification of the IMGKULOT.

Here's a solution to your problem (I haven't tried this yet)
http://www.fileupyours.com/files/111419/anti-IMGkulot.zip
Logged

Create new topics and reply to them to your heart's desire. Let us bring UPV to the internet!
Visit My Blog >> Rex
anehrehc
Forum Freshie
*
Offline Offline

Posts: 15



« Reply #1 on: January 11, 2008, 08:45:37 PM »

it works...thanks!  okay
Logged

Nelson
Global Moderator
*
Offline Offline

Posts: 195


"Love one and flirt with the rest."


WWW
« Reply #2 on: March 20, 2008, 10:27:03 PM »

IMGKULOT from its name itself implies that it's Filipino-made. Now isn't that fantabulous? I wonder if it has already gone out of the country. Haha. At school, where the OS is Linux, it's entirely a useless script. I think we actually opened the file once and it read something about its origin from Iloilo and if found, blah blah blah.

I have heard that that anti-IMGkulot works but prior to that I already have Kaspersky detect the said script. Having a good and updated anti-virus program surely is a must these days.
Logged

Rex
Administrator
*
Offline Offline

Posts: 1151



WWW
« Reply #3 on: March 22, 2008, 09:52:38 AM »

The problem with anti-virus programs is they only remove the vbs file but not the autorun.inf file. I remove IMGKULOT the hard way using hijackthis and the registry editor. There are new variants today and they are increasingly annoying.
Logged

Create new topics and reply to them to your heart's desire. Let us bring UPV to the internet!
Visit My Blog >> Rex
Gcorneja
Forum Sophie
**
Offline Offline

Posts: 89



WWW
« Reply #4 on: March 22, 2008, 03:45:24 PM »

I had downloaded an anti imgkulot from the web. It works!

You just have to delete this virus before some of your programs won't work.

Sin-o may MOST recent version sng kaspersky da? Hehe!
My kaspersky can't detect imgkulot eh. What if my avira ka pagd? Mu na affected ang pagdetect sng kaspersky? ba di xa maxado ka detect?

Tnx.

Logged
Nelson
Global Moderator
*
Offline Offline

Posts: 195


"Love one and flirt with the rest."


WWW
« Reply #5 on: March 22, 2008, 03:48:05 PM »

The problem with anti-virus programs is they only remove the vbs file but not the autorun.inf file. I remove IMGKULOT the hard way using hijackthis and the registry editor. There are new variants today and they are increasingly annoying.


I think Kaspersky does it all. Don't tell me you haven't tried it yet!?


Sin-o may MOST recent version sng kaspersky da? Hehe!
My kaspersky can't detect imgkulot eh. What if my avira ka pagd? Mu na affected ang pagdetect sng kaspersky? ba di xa maxado ka detect?


Before anything else, do you have a valid License Key for your Kaspersky? And what version are you using?
« Last Edit: March 22, 2008, 03:51:49 PM by Nelson » Logged

Gcorneja
Forum Sophie
**
Offline Offline

Posts: 89



WWW
« Reply #6 on: March 22, 2008, 03:54:32 PM »

yah.. I have the valid license key. Kaspersky 6.0...
Logged
Nelson
Global Moderator
*
Offline Offline

Posts: 195


"Love one and flirt with the rest."


WWW
« Reply #7 on: March 22, 2008, 08:11:09 PM »

I see. Mine's 7.0.0.125.
Logged

Rex
Administrator
*
Offline Offline

Posts: 1151



WWW
« Reply #8 on: March 23, 2008, 08:08:25 PM »

The problem with anti-virus programs is they only remove the vbs file but not the autorun.inf file. I remove IMGKULOT the hard way using hijackthis and the registry editor. There are new variants today and they are increasingly annoying.


I think Kaspersky does it all. Don't tell me you haven't tried it yet!?


I have but my trial period has expired ashamed Kaspersky is sooo expensive but it does a good job if you update it. My free version of Avira Antivir can detect imgkulot and some of its variants. It took a while before their definitions could recognize imgkulot though.

If your antivirus doesn't remove the autorun.inf and imgkulot.reg files, run your registry editor and search for the word "superhidden". Change the 0 value to 1. Then go to Folder Options in Windows Explorer and enable "show hidden files and folder". Then open the root directory of your removable drive and you should be able to easily delete the autorun.inf and .reg file. You might also want to check your Windows system32 folder if the virus saved a copy there. Finally, change back your "superhidden" value to 0 and disable "show hidden files and folder".

Oh, by the way, having Kaspersky and Antivir at the same time will really slow down your computer.
« Last Edit: March 23, 2008, 08:42:49 PM by Rex » Logged

Create new topics and reply to them to your heart's desire. Let us bring UPV to the internet!
Visit My Blog >> Rex
jover619
Global Moderator
*
Offline Offline

Posts: 229


EmoL!


WWW
« Reply #9 on: February 04, 2009, 09:09:50 PM »

The story behind ilovemypeanut and kewl.exe virus...
There were two guys who are fond of collecting virus scripts. One night, they tried to modify the imgkulot virus. They ate happy peanuts while doing this stuffs to prevent from being sleepy and increase brain performance in the middle of the night. That is why they name it, i love my peanut, and kewl is their code name. They don't mean to harm other computer, it was just an accident that they forgot to zip the codes because they fall asleep, maybe because of peanut shortage.
==end of the story==
author: kewl
Logged

Rex
Administrator
*
Offline Offline

Posts: 1151



WWW
« Reply #10 on: February 05, 2009, 09:38:39 AM »

Are you one of these 2 guys?
Logged

Create new topics and reply to them to your heart's desire. Let us bring UPV to the internet!
Visit My Blog >> Rex
El Zniv
Forum Tambay
Forum Junior
***
Offline Offline

Posts: 201



« Reply #11 on: February 05, 2009, 02:08:50 PM »

could be.. haha
Logged

speak or not.. you are still judged..
jover619
Global Moderator
*
Offline Offline

Posts: 229


EmoL!


WWW
« Reply #12 on: February 05, 2009, 10:31:36 PM »

...i know them well of course...
Logged

Pages: [1]
  Print  
 
Jump to:  

The upvisayas.net forums is a privately initiated online community and is not in any way associated from the University of the Philippines (UP) System save from the fact that its registered members are primarily alumni, students, staff, and faculty of UP. The owners, administrators, and moderators of the forum is not in any way responsible for the messages posted by forum members.
TinyPortal v1.0 beta 4 © Bloc
Powered by MySQL Powered by PHP Powered by SMF 1.1.9 | SMF © 2006-2009, Simple Machines LLC Valid XHTML 1.0! Valid CSS!