VIRUS REMOVAL [Computer Troubleshooting... [amvo.exe amvo0.dll ampo.exe amvol.dll xfoolavp.com and autorun.inf] virus issues…]

38 Responses to “ VIRUS REMOVAL [Computer Troubleshooting... [amvo.exe amvo0.dll ampo.exe amvol.dll xfoolavp.com and autorun.inf] virus issues…] ”

1. 

   sreejith on January 16, 2008 at 5:36 am

   for me the file name was amvo1.dll
2. 

   Ramana on January 26, 2008 at 5:43 pm

   Visit this site….to remove amvo virus…
   http://www.en.mygeekside.com/?p=18#comment-193
3. 

   Bhupendra on February 4, 2008 at 5:36 am

   Plese send me above tool
4. 

   mtaram on February 4, 2008 at 8:23 pm

   Download by clicking the link above….
5. 

   murali on February 7, 2008 at 3:05 am

   Plese send me Download antivirus files
6. 

   murali on February 7, 2008 at 3:06 am

   Download antivirus files
7. 

   anil on February 9, 2008 at 11:11 am

   Thanks Ramana
   Your VB programme is very good i get rid off by it for the virus of amvo.exe
   thanks
8. 

   Apocalypse on February 9, 2008 at 3:47 pm

   This solution deletes/modifies registry keys/entries added/modified by this malware. Before performing the steps below, make sure you know how to back up the registry and how to restore it if a problem occurs. Refer to this Microsoft article for more information about modifying your computer’s registry.

   1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
   2. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software>Microsoft>
   Windows>CurrentVersion>Run
   3. In the right panel, locate and delete the entry:
   amva = “%System%\amvo.exe”
   (Note: %System% is the Windows system folder, which is usually C:\Windows\System on Windows 98 and ME, C:\WINNT\System32 on Windows NT and 2000, or C:\Windows\System32 on Windows XP and Server 2003.)

   Restoring Modified Registry Entries

   1. Still in Registry Editor, in the left panel, double-click the following:
   HKEY_CURRENT_USER>Software>Microsoft>Windows> CurrentVersion>Explorer>Advanced
   2. In the right panel, locate the entry:
   Hidden = “1″
   3. Right-click on the value name and choose Modify. Change the value data of this entry to:
   2
   4. In the left panel, double-click the following:
   HKEY_CURRENT_USER>Software>Microsoft>Windows> CurrentVersion>Explorer>Advanced
   5. In the right panel, locate the entry:
   ShowSuperHidden = “0″
   6. Right-click on the value name and choose Modify. Change the value data of this entry to:
   1
   7. In the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows> CurrentVersion>Explorer>Advanced>Folder>Hidden>SHOWALL
   8. In the right panel, locate the entry:
   CheckedValue = “0″
   9. Right-click on the value name and choose Modify. Change the value data of this entry to:
   1

   Removing Other Malware Key from the Registry

   1. Still in Registry Editor, in the left panel, double-click the following:
   HKEY_LOCAL_MACHINE>SOFTWARE>Classes>CLSID
   2. In the left panel, locate and delete the key:
   MADOWN
   3. Close Registry Editor.

   Deleting Malware-created AUTORUN.INF/s

   1. Right-click Start then click Search… or Find…, depending on the version of Windows you are running.
   2. In the Named input box, type:
   AUTORUN.INF
   3. In the Look In drop-down list, select a drive, then press Enter.
   4. Select the file, then open using Notepad.
   5. Check if the following lines are present in the file:
   [AutoRun]
   ;{Garbage}
   open=xn1i9x.com
   ;{Garbage}
   shell\open\Command=xn1i9x.com
   ;{Garbage}
   shell\open\Default=1
   ;{Garbage}
   shell\explore\Command=xn1i9x.com
   ;{Garbage}
   6. If the lines are present, delete the file.
   7. Repeat steps 3 to 6 for AUTORUN.INF files in the remaining removable drives.
   8. Close Search Results.

   Deleting the Malware File(s)

   1. Right-click Start then click Search… or Find…, depending on the version of Windows you are running.
   2. In the Named input box, type:
   %System%\amvo.exe
   3. In the Look In drop-down list, select My Computer, then press Enter.
   4. Once located, select the file then press SHIFT+DELETE.
   5. Repeat steps 2 to 4 to delete the following file:
   %System%\amvo0.dll
   %Temp%\zhklagpv.dll
   (Note: %Temp% is the Windows Temporary folder, which is usually C:\Windows\Temp or C:\WINNT\Temp.)
9. 

   Arun Pradeep. K on February 15, 2008 at 6:53 pm

   Thanks for the AMVO virus removal, can any one help me to solve a problem, the problem is, whenever i boot the system disk checking is running even if i shut down the system corrrectly, please help
10. 

    Prashant on February 21, 2008 at 2:06 am

    Thanks mtaram. Your solution worked!!
11. 

    Tunde on March 4, 2008 at 9:57 am

    Thanks for the info on the removal of amvo (and it’s friends)!

    God bless you big time!!!
12. 

    arun on March 4, 2008 at 11:53 am

    plz send this virus remove software site link
13. 

    andback on March 20, 2008 at 8:48 pm

    Ive written a detailed blog about removing the autorun.inf virus and other issues at http://andback.wordpress.com

    also talks about removing those viruses which even the antivirus cant remove and to revert back to settings prior to infection.

    Hope this helps too.
14. 

    chirs on March 26, 2008 at 11:24 pm

    The best way to delete autorun.inf and its files associated is to use USB FireWall in this link
    http://www.net-studio.org/application/usb_firewall.php

    It stops too the spreading of virus from USB key or external drive.
15. 

    Faroque on April 7, 2008 at 5:39 am

    Thanks a lot……..
16. 

    mtaram on April 7, 2008 at 10:55 am

    you are welcome I am glad this has helped so many ppl…
17. 

    Siliwangi on April 11, 2008 at 8:31 am

    thank`s guys…:D
18. 

    cmcminh on April 28, 2008 at 11:39 am

    thanks
19. 

    dileep on May 2, 2008 at 7:00 am

    recently attacked with emv.exe. Its coming in the opening window with some error message. Also yahhomessanger after sign in automatically diconects. how to get rid of this?
20. andreas04: close to attraction on May 18, 2008 at 12:51 am

    [...] линк 1 , линк 2 , линк 3 [...]
21. 

    thompson on June 23, 2008 at 11:01 am

    please tell me some proper way to combat against the malicious files that keep retrieving on my desktop even after being removed for quite some time !
22. 

    solano on June 26, 2008 at 11:24 am

    either use xoftspy.exe or if you don’t have crucial data on your pc just reinstall windows dude !
23. 

    mtaram on June 27, 2008 at 6:40 am

    ya u can do it but once u reinstall windows and double click on any of the infected drives u are a gonner…..
    I tried it several times. Your Idea is good….
    Thank you
24. 

    solano on June 27, 2008 at 11:40 am

    glad to help you friend……hope that was helpful
25. 

    Vijay on June 29, 2008 at 11:23 am

    Thanks a lot for the instructions. I think i removed the amvo malware but I am facing a problem with hidden files. The radio for the show hidden files in the view tab of Folder options in explorer was unchecked for both options (show/hide). I set to Show hidden files but once i click on Apply, it hides all the hiddent files.
    I have to repeat steps from Apocalypse to show the files again! Any idea why this could be happening?
    TIA
26. 

    Vijay on June 29, 2008 at 11:29 am

    never mind I skipped a step. Got it. Thanks again!
27. 

    mtaram on June 30, 2008 at 2:10 pm

    Glad to know that it helped you…. I am doing my MBA right now it started in june so i dont get time to check comments often.
    Thank u.
28. 

    james on July 2, 2008 at 10:39 am

    Please send amvo virus removal software
29. 

    amit on August 6, 2008 at 3:09 pm

    Sir my hidden files are showing but i cannot open my drives after running the registry file. Please help me to open my drives.
30. amvo.exe virus removal « Cracksandhacks’s Weblog on September 7, 2008 at 8:53 am

    [...] http://mtaram.wordpress.com/2008/01/03/computer-troubleshooting-virus-issues/ [...]
31. 

    Deniz on October 1, 2008 at 11:34 pm

    Hi.
    That is a certain solution.
    http://www.msproficient.com/2008/about-amvoexe-virus-how-to-clean-amvoexe/

    sincerely
32. 

    Deniz on October 28, 2008 at 11:39 pm

    That is a response. You dowload and run this program(ComboFix).

    http://www.msproficient.com/2008/about-amvoexe-virus-how-to-clean-amvoexe/
33. 

    Jaklin on December 22, 2008 at 5:11 pm

    Hi.. this solved my problem related to hidden files. But I cannot open my drives after running reg file. help pls ;(
34. 

    mtaram on December 23, 2008 at 5:53 am

    please follow the post that is regarding the autrun.inf virus and follow the steps and see if it resolves ur issue.
35. 

    Jaklin on December 26, 2008 at 6:34 pm

    Hi. 10x for your replay… but it didn’t solve my problem I uninstalled the old version of MS office and want to reinstall , but during the installation I’m getting alert about error and the installation interrupts..
36. 

    mtaram on December 27, 2008 at 11:12 am

    Try installing in safe mode…
37. 

    Thomson@ Cheap computer on February 7, 2009 at 10:26 am

    Computer virus is surely a great problem you never know when it will attack and spoil your hard work . Thanks for the guidelines .
38. 

    sonia19 on October 11, 2010 at 5:52 pm

    Remove amvo.exe Cloaked Malware

    http://www.tips29.com/2009/03/remove-amvoexe-cloaked-malware.html