armendi_csi
2008-02-08, 17:37
amvo.exe fast removal found
I had amvo.exe virus in my computer. It is a very dangerous virus, and still no Antivirus Could remove it,
at this time.
These are the symptoms:
1. You can't see your hidden files
2. Even if you edit the KEY-s in registry, they are back again
3. and if you delete it, it appears again.
If you have this virus, (trojan) you have to do the following.
You have to trust all this what i write, even it may look strange to you.
1. Download EditPlus software. It is an Text editor toll that makes you possible to see all files, even some files that you have never seen.
2. After you have downloaded it, open it and do in C://WINDOWS/system32 and delete amvo.exe and amvo.dll (if it is there)
3. Restart the computer, and start it in SAFE MODE
4. Open TaskManager (CTRL + ALT +DEL), and END explorer.exe (terminate this process)
5. In Task Manager, go FILE > New Task (Run..), and find regedt32.exe
Find these values: x.com, autorun.inf, amvo.exe, and delete them imediately.
(if you have TuneUp Utilities it works faster)
After this step, close regedt32.exe,
then
6. In Task Manager, go FILE > New Task (Run..), and find editplus.exe
7. After that, Go in C://WINDOWS/system32 and
7.a) if there is amvo.exe, open it in EditPlus, and delete some of the content (you should delete almost 90% of it's content). You should delete
content at many places (in the beggining of file, in the middle and in the end of file)
7.b) If there is no amvo.exe, you should than create a file named amvo.exe, and write to it anything (i wrote F..K YOU 100 times)
8. Do the same as in step 7 for the file amvo.dll
9. With EditPlus, go in C:// , and delete all of the following files:
autorun.inf
desktop.ini
2eiftr... something
x.com
10. Don't hurry...
With EditPlus, go in all folders that IExplorer uses , like
C:\Documents and Settings\you\Application Data
C:\Documents and Settings\you\Local Settings
and delete all files like
desktop.ini
autorun.inf
x.com
2eiftr
11. Search also in other HardDrives or USB Memory sticks. Be carefull, YOu have to search in all PLACES where it can be hidden.
12. You can now restart your computer
13. Even now, amvo.exe it can start, but it terminates imediately, because he is now MUTILATED
I had amvo.exe virus in my computer. It is a very dangerous virus, and still no Antivirus Could remove it,
at this time.
These are the symptoms:
1. You can't see your hidden files
2. Even if you edit the KEY-s in registry, they are back again
3. and if you delete it, it appears again.
If you have this virus, (trojan) you have to do the following.
You have to trust all this what i write, even it may look strange to you.
1. Download EditPlus software. It is an Text editor toll that makes you possible to see all files, even some files that you have never seen.
2. After you have downloaded it, open it and do in C://WINDOWS/system32 and delete amvo.exe and amvo.dll (if it is there)
3. Restart the computer, and start it in SAFE MODE
4. Open TaskManager (CTRL + ALT +DEL), and END explorer.exe (terminate this process)
5. In Task Manager, go FILE > New Task (Run..), and find regedt32.exe
Find these values: x.com, autorun.inf, amvo.exe, and delete them imediately.
(if you have TuneUp Utilities it works faster)
After this step, close regedt32.exe,
then
6. In Task Manager, go FILE > New Task (Run..), and find editplus.exe
7. After that, Go in C://WINDOWS/system32 and
7.a) if there is amvo.exe, open it in EditPlus, and delete some of the content (you should delete almost 90% of it's content). You should delete
content at many places (in the beggining of file, in the middle and in the end of file)
7.b) If there is no amvo.exe, you should than create a file named amvo.exe, and write to it anything (i wrote F..K YOU 100 times)
8. Do the same as in step 7 for the file amvo.dll
9. With EditPlus, go in C:// , and delete all of the following files:
autorun.inf
desktop.ini
2eiftr... something
x.com
10. Don't hurry...
With EditPlus, go in all folders that IExplorer uses , like
C:\Documents and Settings\you\Application Data
C:\Documents and Settings\you\Local Settings
and delete all files like
desktop.ini
autorun.inf
x.com
2eiftr
11. Search also in other HardDrives or USB Memory sticks. Be carefull, YOu have to search in all PLACES where it can be hidden.
12. You can now restart your computer
13. Even now, amvo.exe it can start, but it terminates imediately, because he is now MUTILATED