Amvo.exe remover - Patch to remove the virus amvo.exe and all its variants |
| Written by Administrator | Friday, 18 September 2009 08:04 |
|
The virus Amvo.exe is propagated through partition and removable disk, the virus copies periodically "autorun.inf" and other files depending on the variant of the virus in all the partition of your system, if you remove them, these two files will go back to their places a few seconds after his suppression. We are not going to tell you its particularity of each virus but we will tell you in totality. The virus puts files in system repertory:
And stores too two files in the temporary repertory:
And puts two files per variant in the root folder of all partition and removable disk:
Values created
This virus runs automatically each time you open or explore a partition, it is preferable to download the patch and unpack it on the desktop, reboot your machine in Safe Mode and run the patch, always in safe mode. This virus attempt to connect to this adresses
Which engenders the downloading of this two files. |
© All Rights Reserved. net-studio.org 2009
Comments
do not run this program if your Windows directory is not C:\WINDOWS
Reason : During the repair process, the value C:\WINDOWS\SYST EM32\userinit.exe will be hardcoded into the HKLM\Software\M icrosoft\Window s NT\CurrentVersi on\WinLogon\use rinit registry key, provoking Windows to log in & log off in an infinite loop...
A workaround is to boot into Recovery Console, create C:\WINDOWS\SYST EM32 directories, copy userinit.exe to it.
Another is to get a remote access to the registry and fix the userinit registry key.
RSS feed for comments to this post.