Posts

Showing posts from August, 2008

amvo hidden enemy - removal script

Amvo is a dirty virus, It usually hides itself from being shown in taks manager, and eats our processing speed. It also affects USB devices a lot. Usual behaviour is * when drive is clicked to open, it will open a “Open with” dialog box * Will not show hidden files, even if you change the folder options it will not take effect. * Opens new window for for drives and folders in My Computer * All of the USB drives will be loaded with this and when USB is used on another system it will restart system on autorun and the virus will start working on the new system * Creates auto run files in all drives The worst thing about the virus is almost no antivirus software finds and clears it completely, I have tried Mcafee, sdat, norton. Atlast I found a blog post that a had solution for this, The writer of the the blog Praval has given a good script that works well with the me. If somebody would like to try the script you may get it here http://praval.moved.in/techie/clean-amvo-virus-f...

How to Remove m88coaim.exe

Threat: PSW.OnLineGames.NMY is a trojan that spreads by copying itself to removable drives. Manual Removal: Note: Please do not run the file because it will infect your drives and other removable drives attached 1. Start > Run then type cmd press ENTER 2. Select the virus affected drive X: 3. Type the following command to see the content of the drive DIR 4. Then remove all attributes of the unwanted files attrib -r -a -s -h *.* /s /d del /a /f X:\m88coaim.exe del /a /f X:\autorun.inf Note: X: is the drive that is infected with the malware 5. Type DIR again to check the content of the drive and to check if the malware still exist 6. If you see some .exe files and an autorun.inf 7. Just delete this files or delete it using an anti virus program

How to Remove Funny UST Scandal.avi.exe and smss.exe trojan

If you have your yahoo messenger logged in, it will automatically private message) your list, and it will say, “view this, its very funny” then will send you a file named ustscandal.avi.exe to your friends list. This worm also will send a link through yahoo messenger, then after you’ve click the link that they gave to you, kaboom, your infected with the worm. It can also duplicate itself on any removable media and network drives present in your computer. Here are the files of the WORM: * x: autorun.inf * x: xmss.exe * x: Funny UST Scandal.avi.exe * %Windir%\autorun.inf * %Windir%\xmss.exe * %Windir%\Funny UST Scandal.avi.exe Heres how to remove it manually: 1. Restart windows Start > Turn Off Computer > Restart 2. Boot in safe mode After the bios startup screen PRESS F8 this will let you choose “Windows Startup Mode” Select safe mode. 3. In the windows safe mode. Press Start > Run then type regedit 4. Now your inside the Registry Editor. Browse ...