There’s a nagging virus which hides the hidden files and folders (the system files too), its in every comp of office, home and also couple of my friends comps & laps (even in cyryx).
Its been spreading thru pen drives n external HDD.
Kaspersky havnt detected this virus till today so Im having to manually remove them all these days. Eventually I have found a tool that removes this so just wanna post it here coz its hard to find from googling.
download it from: http://www.yaman.ws/jsite/carackeb/General_Removal.rar
=site seems to be gone so uploaded the file to a filehosting site:
http://rapidshare.com/files/138241380/General_Removal.rar
Another way of removing the virus is thru this tool but it doesnt fix showing the hidden files.
download : http://rapidshare.com/files/138241380/General_Removal.rar
paste this on the Input script here: part of the window:
Files to delete:
C:\autorun.inf
C:\t.com
C:\WINDOWS\system32\amvo.exe
C:\WINDOWS\system32\amvo0.dll
C:\WINDOWS\system32\amvo1.dll
C:\Documents and Settings\…User\Local Settings\Temp\help.exe
C:\Documents and Settings\…User\Local Settings\Temp\REGSCRIPT.REG
C:\Documents and Settings\…User\Local Settings\Temp\xdx9qx7p.dll
“…User” replace the windows logging name”.
After booting the virus will b gone, showing u a log.
Switch off and on the system restore also.
There is a hijackthis.exe program which can be used to delete unwanted startup objects.
(Dont delete anything if you dont know what ur doing )
Hope this help.
clean it and clean it again. thats what youa re talking about. arent you?. Its gonna be back again sooner or later. if its Micro$oft Window$ XP.
So why dont you disable autorunning of viruses on xp for ever. I have tried my best to explain it.
Comment by Mr.Blogged — April 21, 2008 @ 1:27 pm |
thankyou for this helpful article.
i ve spent 2 hours to remove this virus.
after finding your website and program i had taken 3 seconds to remove it
thank you again and again and again
Comment by alper — April 26, 2008 @ 9:38 pm |
Thanks a lot, dude… spent a few days trying to get rid of this pest, but it ended all as soon as I ran a good Avenger script.
By the way, the yaman.ws site doesn’t work.
Comment by TG the Cephalopoid — June 22, 2008 @ 10:26 am |
links aren’t working…
Comment by yilmaz — September 15, 2008 @ 1:03 pm |