MrMaldivian’s place

April 20, 2008

amvo.exe t.com Autorun.inf virus remove

Filed under: Uncategorized — mrmaldivian @ 12:42 pm
Tags:

There’s a nagging virus which hides the hidden files and folders (the system files too), its in every comp of office, home and also couple of my friends comps & laps (even in cyryx).

Its been spreading thru pen drives n external HDD.

Kaspersky havnt detected this virus till today so Im having to manually remove them all these days. Eventually I have found a tool that removes this so just wanna post it here coz its hard to find from googling.

download it from: http://www.yaman.ws/jsite/carackeb/General_Removal.rar

=site seems to be gone so uploaded the file to a filehosting site:

http://rapidshare.com/files/138241380/General_Removal.rar

Another way of removing the virus is thru this tool but it doesnt fix showing the hidden files.

download : http://rapidshare.com/files/138241380/General_Removal.rar

paste this on the Input script here: part of the window:

Files to delete:
C:\autorun.inf
C:\t.com
C:\WINDOWS\system32\amvo.exe
C:\WINDOWS\system32\amvo0.dll
C:\WINDOWS\system32\amvo1.dll
C:\Documents and Settings\…User\Local Settings\Temp\help.exe
C:\Documents and Settings\…User\Local Settings\Temp\REGSCRIPT.REG
C:\Documents and Settings\…User\Local Settings\Temp\xdx9qx7p.dll

“…User” replace the windows logging name”.

After booting the virus will b gone, showing u a log.

Switch off and on the system restore also.

There is a hijackthis.exe program which can be used to delete unwanted startup objects.

(Dont delete anything if you dont know what ur doing )

Hope this help.

4 Comments »

  1. clean it and clean it again. thats what youa re talking about. arent you?. Its gonna be back again sooner or later. if its Micro$oft Window$ XP.
    So why dont you disable autorunning of viruses on xp for ever. I have tried my best to explain it.

    Comment by Mr.Blogged — April 21, 2008 @ 1:27 pm | Reply

  2. thankyou for this helpful article.
    i ve spent 2 hours to remove this virus.
    after finding your website and program i had taken 3 seconds to remove it

    thank you again and again and again

    Comment by alper — April 26, 2008 @ 9:38 pm | Reply

  3. Thanks a lot, dude… spent a few days trying to get rid of this pest, but it ended all as soon as I ran a good Avenger script.
    By the way, the yaman.ws site doesn’t work.

    Comment by TG the Cephalopoid — June 22, 2008 @ 10:26 am | Reply

  4. links aren’t working…

    Comment by yilmaz — September 15, 2008 @ 1:03 pm | Reply


RSS feed for comments on this post. TrackBack URI

Leave a comment

Blog at WordPress.com.