FrEn

E-mail Print PDF

Amvo.exe - Patch pour supprimer le virus Autorun AV (amvo.exe, xn1i9x.com)

Written by Administrator  |  Friday, 18 September 2009 08:37
AddThis Social Bookmark Button
Information Le virus Autorun-G (Autorun-G[Trij]/Win32.NSAnti.r) se propage par partition y compris les disques amovibles, le virus copie périodiquement deux fichiers "autorun.inf" et "ntdelect.com", si vous les supprimez sur une partition, ces deux fichiers se remettent dans la partition quelques secondes après la suppression.

Fichier Le virus met aussi deux fichiers dans le repertoire système :

  • <System>\amvo.exe
  • <System>\amvo0.dll

Met aussi deux fichiers dans le dossier temporaire :

  • <Temp>\fq9.dll
  • <Temp>\w2e.sys

Et met deux fichiers dans toutes les partitions de votre système :

  • Autorun.inf
  • xn1i9x.com

Registre Crée l'entrée de registre :

  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    • amva="<System>\amvo.exe"


ATTENTION Ce virus se lance automatiquement à chaque fois que vous ouvrez ou explorez une partition, il est donc préférable de télécharger ce patch et de le décompresser sur le bureau, de redémarrer votre machine en mode sans échec et de lancer le patch, toujours en mode sans échec.

Download

 

Comments  

 
0 #1 khaledtoson 2009-12-09 08:44
happy noun for ever
Quote
 

Add comment


Security code
Refresh

Related articles
Latest posts
Free malware removal tool to remove Total Vista Security
_WRITTEN_BY Administrator 16/03/2010
Total Vista Security is a rogue antispyware that may reprensent security risk for your system, it's a malware that pretends to be an Antivirus. Total Vista Security conducts a fake scan of your…Read more...
Free malware removal tool to remove Virus Protector
_WRITTEN_BY Administrator 15/03/2010

Virus Protector is a rogue Antispyware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that there are…Read more...

Free malware removal tool to remove Dr. Guard
_WRITTEN_BY Administrator 01/03/2010
Dr. Guard is a rogue Antispyware from the Paladin Antivirus Family, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are…Read more...
Free malware removal tool to remove Paladin Antivirus
_WRITTEN_BY Administrator 27/02/2010
Paladin Antivirus is a rogue Antispyware, a scareware, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a…Read more...
Free malware removal tool to remove PC Defender
_WRITTEN_BY Administrator 24/02/2010
PC Defender is a rogue Antispyware, it's a malware that pretends to be an Antivirus. It is a wolf in sheep's clothing. It conducts a fake scan of your system; you are warned by a fake alarm that…Read more...
.
Information | Contact

© All Rights Reserved. net-studio.org 2009