Monday, March 10, 2008

Remove IMGKULOT VIRUS

To remove it manually, follow these steps:
1. Open Windows Task Manager by presssing Ctrl-Alt-Del and clicking on the Task Manager button on the dialog box that appears.

2. Be sure to click on the “Show processes from all users” checkbox. In the Processes tab, locate wscript.exe and click on the "End Process button".
3. Locate explorer.exe and click "End Process".
4. In the Task Manager menu, click File > New Task (Run) and type “cmd” and click on the OK button. This will open a command prompt console.

5. On the console, type “cd C:\WINDOWS\System32″ and press Enter.

6. Again, type "del imgkulot.* /f /s /q /a" and press Enter. This will delete all “imgkulot” files inside System32 folder.

7. Again, type "del c:\autorun.* /f /s /q /a" and press Enter. This will delete all autorun files on root folder.

8. If you have partitions in your hard disk go to that drive by typing "D:\" and press enter or any any drive letter you assigned to those partitions. Once in that drive, type the command in #7.

10. On Task Manager, Click File > New Task (Run.) and type “regedit” and click OK.

11. Go to the the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon.

12. On the right, look for the key and value pair that follows. Make sure it is the same value. If not, modify it and make sure it reads “Userinit”=”C:\WINDOWS\system32\userinit.exe,”

12. Restart your computer.

Or Search www.google.om for this: IMGKULOT REMOVER.exe

No comments: