plz help

[mmarwan1]

guys plz help i am formatin my friend computer and i got this virus after i formated
the virus is called amvo.exe it appears to me on startup (i press dont send ) but the symptoms are bad:

• Cannot show hidden files
• Slows down USB devices
• Adds infections to plugged in USB devices
• Drives open in new windows from My Computer

so plz help i found this bass it is too hard :http://digitalpbk.blogspot.com/2008/...ory-stick.html



2-the computer boot when the welcome sreen apears i have to press ctr +alt+del to enter desktop(win xp) and i dont want that to happen

thx in advance

[J()e]

dude..what's so difficult in step 1 in the site u mentioned

go start~>run~>regedit~>delete everything related to amvo.exe.
then start~>run~>msconfig~>remove everything related to the virus (uncheck it)
restart your pc...

[SysTaMatIcS]

no i had this problem before , only KASPERSKY managed to solve it .
heres a link , if u want a key pm me , and ill send u
http://www.kaspersky.com/downloads

[Google]

Follow these steps:

1- Run the pc in safe mode

2- Go run > cmd
Type "c:"
Type "attrib"
Now you can see all the files in the c drive including the hidden ones...
Type "attrib -s -r -h amvo.exe"
Type "del amvo.exe"
Type "attrib -s -r -h autorun.exe"
Type "del autorun.exe"
Now you finished with the drive c, you have to do the same thing for the other drives...
After you finish type "c:"
Type "cd windows"
Type "cd system32"
Type "attrib -s -r -h amvo.exe"
Type "del amvo.exe"

3- Go run > msconfig
Go to the startup tab and uncheck the amvo.exe

4- Go run > regedit
Go here HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies
Search the folders and delete all the restrictions (the keys)
Also go HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Policies and do the same thing.

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run
and delete the amvo key if you find it.
Also go HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run and do the same thing.

5- Copy this code and paste it in notepad and save it as .bat and run it.

@ECHO OFF
REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /V NoFolderOptions /T REG_DWORD /D 0 /F
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN /V CheckedValue /T REG_DWORD /D 2 /F
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN /V DefaultValue /T REG_DWORD /D 1 /F
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL /V CheckedValue /T REG_DWORD /D 1 /F
REG ADD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL /V DefaultValue /T REG_DWORD /D 0 /F

6- Bezyede hal2ad...

[Joker666]

yes kaspersky solved it for me too

[HizbullaH]

All You Need Is The 1 MB File "combofix.exe" Search For It In Google And Download It!!
After You Download It, Close Everything And Run It!!
It Will Do Some Work, And Then The PC Will Restart
After The PC Restarts, You Will Find No amvo.exe

Peace

[majousseh]

helloguys, everytime that i run the norton full analyses of the system on my computer, the program stops on a file named: securityRisk.URLRedir.
what does that mean? is it a bug on the norton?

[Google]

The answer is here:
http://norton.lithium.com/norton/boa...thread.id=4015