There is a virus that appeared these days on the Corporate network I work, it spreads via USB flash drives (any removable disk , for that matter). Most antivirus software didn’t detect it and if they detect it, they could not delete successfully.
I have designed a little VisualBasic script that removes the virus automatically and from each infected drives. This script also have been tested in several machines and have cleaned infection sucessfully.
And you can download it here:
Once downloaded, just double click on downloaded file.I recommend once script execution is finished, restart your computer and execute the script again to ensure the complete removal of the virus.If you want to know how this virus works and how my script works, you can continue reading.The behavior of this virus is interesting:1. It replicates through USB flash drives using autorun.inf file. For those who don’t know what is autorun.inf: autorun is skill of several operating systems for execution of commands when a removable media is inserted as a CD, DVD or USB flash drives. In Microsoft Operating Systems if want to do a automatic action when insert a CD, DVD or USB flash drive must contain an autorun.inf file in root folder in each drive o USB flash drive.Typical structure of an autorun.inf file is:
[Autorun]
Open=Name.ext
Label=Drive_Label
icon=icon_name.ico
In Open section is set file path that you want execute, in this case of this virus: in the Open section calls to the following files:
ntdeiect.com
n1detect.com
n?deiect.com
nide?ect.com
u?de?ect.com, etc
2. So when you insert a USB flash memory and you click on Open memory to see files, this file executes said files. I must say that these files are hidden and with system attributes and read-only, with this, they cant be seen normally.
Once executed this files, the virus creates a copy from itself with following file names:
C:\WINDOWS\System32\amvo.exe
C:\WINDOWS\System32\avpo.exe
C:\WINDOWS\System32\amvo0.dll
C:\WINDOWS\System32\amvo1.dll
C:\WINDOWS\System32\avpo0.dll
C:\WINDOWS\System32\avpo1.dllThese files are created with system and hidden attributes.
3. Then, the virus proceeds to write in Registry a value to ensure this file be executed on every System boot. This is possible writing system Registry the following:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
“amva”=amvo.exeo
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
“avpa”=avpo.exe
4. Then the virus begins to infect every drives on computer, creating autorun.inf and n1detect.com files in root folder on each drive, and related names as I said above. In this way when users click on MyComputer and then open drives: C, D, E, etc, they will be repeating infection process. Better said repeating step 1.
5. The virus also ensures that user can not see system hidden files in anyway. This is posible writing in the registry the following:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
“Hidden”=dword:00000002
Once we know the behavior of this virus, we can proceed to remove manually if you want.
This is you must do in C drive:
1. Finish virus active proccess, better said: amvo.exe and avpo.exe from command line:
taskkill /f /im amvo.exe
taskkill /f /im avpo.exe
2. Remove system, hidden and read-only attributes to the virus files, this is possible using following commands from command line:
attrib -s -h -r C:\autorun.inf
attrib -s -h -r C:\ntdeiect.com
attrib -s -h -r C:\n1detect.com
attrib -s -h -r C:\n?deiect.com
attrib -s -h -r C:\nideiect.com
attrib -s -h -r C:\nide?ect.com
attrib -s -h -r C:\u?de?ect.com
3. Proceed to remove of these files using delete command with /f option to force deleting, /q option to delete without asking for confirmation and the/a option to say that the files to be deleted are file with attributes, from command line:
del C:\autorun.inf /f /q /a
del C:\ntdeiect.com /f /q /a
del C:\n1detect.com /f /q /a
del C:\n1deiect.com /f /q /a
del C:\nide?ect.com /f /q /a
del C:\u?de?ect.com /f /q /a
4. Now we remove hidden, system and read only attributes to the files located at C:\windows\system32 folder:
attrib -s -h -r c:\windows\system32\amvo.exe
attrib -s -h -r c:\windows\system32\avpo.exe
attrib -s -h -r c:\windows\system32\amvo0.dll
attrib -s -h -r c:\windows\system32\amvo1.dll
attrib -s -h -r c:\windows\system32\avpo0.dll
attrib -s -h -r c:\windows\system32\avpo1.dllor beter said:
attrib -s -h -r c:\windows\system32\amvo*.*
attrib -s -h -r c:\windows\system32\avpo*.*
5. Once done this, we proceed to delete files of the virus located at C:\windows\system32 folder:
del /f c:\windows\system32\amvo*.*
del /f c:\windows\system32\avpo*.*
6. Now we delete from Registry the values created for the virus to avoid its automatic execution on system boot, from command line:
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ /v amva /f
reg delete HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ /v avpo /f
7. And we restore option to see system and hidden files, from command line:
reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ /v Hidden /t REG_DWORD /d 1 /f
8. Repeat steps 1-7 en all drives.
9. Restart the computer or if you prefer you can restart Explorer.exe proccess doing this from command line:
taskkill /f /im explorer.exe
start explorer.exeThis is done for ensure unhooking proccess from explorer and unload malicious dll’s, in this way is possible deleting all virus files from drive.
10. Repeat 4-5 steps.
As you can see, the proccess for removing this virus is possible manually, but as you can see too is a little complicated if you are not familiar with Command Prompt a.k.a CMD.EXE.
However if you want to do this in easy way, you can download the script I wrote
Also if you want you can edit the script to see the source code or modify to add some lines. Just right click and select Modify to the file. I recommend that only you make modifications if you know what are you doing.
January 21st, 2008 at 11:05 am
excellent script .it has worked .
thanks a lot.
January 22nd, 2008 at 2:13 am
Thank you very much Vijay for comments!! I hope to have helped!
Felipe
January 22nd, 2008 at 4:02 am
Thanks Dear,
My purpose has been solved, nice script written by you.
Thanks Again,
Nadeem Ansari
January 22nd, 2008 at 6:23 am
thanks for your script
it really helped me
January 22nd, 2008 at 10:18 am
Hey Dear,
It worked for me.. Thanks a billion…
Regards
Gokul
January 22nd, 2008 at 4:17 pm
Who is the writer of this script. Very perfect script. I can’t tell you that it remove the virus just like the wiping of water.
Thankssss a lot to the writer of the script
With kindest regards
Your friend
January 22nd, 2008 at 4:25 pm
Hi there,
I have just read your post.I am infected by the same virus.I tried running your script on a test pc.I didnt find anything over it after running it.Thanks alot for it.I have couple of questions,I shall really appreciate if you can answer them.
1)I found the pc a little slow after running the script.May be iit was just a hunch of mine but I felt it has become slow.Is it my doubt or script changes some behaviour over the system?
2)I didnt find the virus coming back again.But any chances it can replicate or come alive again?If yes then what to do,I mean how to make sure it wont come back again?
3) Any other way is there that it can come back except from flash drives /usb drives?
Thanks once again and I hope I did ask sme thing reasonable only.
Regards,
Aman….
January 22nd, 2008 at 5:31 pm
Kudos!!!
Thanks a ton
January 22nd, 2008 at 7:24 pm
Nicely done!
It is always great to get a detailed explanation of the nature of an infection and learn from the event.
January 22nd, 2008 at 11:20 pm
thanks dears
January 23rd, 2008 at 3:17 am
Hello AMAN;
Thank you for your comments. I hope to help with my answers:
QUESTION 1: I found the pc a little slow after running the script.May be iit was just a hunch of mine but I felt it has become slow.Is it my doubt or script changes some behaviour over the system?
ANSWER 1: Script does not make any changes on system to slow down computer. Script just search for virus files on each drive and delete them.Maybe you can experiment certain perfomance decrease while script is running, this is because script searchs in each drive for virus files. And script repair system registry to make hidden files accesible, because amvo virus try to hide its presence from our eyes. Do not worry.
QUESTION 2: I didnt find the virus coming back again.But any chances it can replicate or come alive again?If yes then what to do,I mean how to make sure it wont come back again?
ANSWER 2: Could happen:
Your computer is clean, but you insert a infected removable media.
Solution: DO NOT OPEN drives via MyComputer doing double click on
drives at right panel. Look at the image: you should not open drives in this way:
http://www.mygeekside.com/downloads/2008/01/imagen1.JPG
I use to do this: press Windows key + E and then it opens Explorer, then open each drive making single click on each drive at left panel. Look the image: red circle indicates what you should not to do. And green square shows how to open drives. Doing this, you can avoid future infections. I do this all time, and I don’t have problems with removable drive viruses.
http://www.mygeekside.com/downloads/2008/01/imagen2.JPG
QUESTION 3: Any other way is there that it can come back except from flash drives /usb drives?
ANSWER 3: This virus originally is downloaded via internet, when some users download some kind of online games, or video codecs. However this virus is dangerous, because is like a keystroke logger and can captures usernames or passwords.
I hope to have answered your questions. I am happy to help.
Regards.
Felipe
NOTE: Mi native language is spanish, that is the reason you see spanish language on images.
January 23rd, 2008 at 2:52 pm
Hi Felipe,
Thanks for your quick response.Yes I have got them completely satisfying and you actualy gave a great help.I have few more doubts which I want to ask.Hope you wont mind
1)I have found in one machine that this virus was there in the Windows PREFETCH folder.I am not sure what this folder does but why it is there?I assumed it to be in System32 folder only (and it was there too).Any inputs for this will be really helpfull.
2)I tried running the first command taskkill /f /im avmo.exe .It gave me the message that process amvo.exe is not there.Why so?Its actually there in the startup as shown by msconfig.
3)I was not able to delete amvo0.dll even when I changed the attribs to -s -h -r.It said access denied. What could be the reason for that?
I hope I am not bugging you too much.Thanks a bunch for your great help.
Regards,
Aman….
January 23rd, 2008 at 4:44 pm
Hi Felipe,
Just one more question.I have just run your script on one machine.I am not sure why but I got a message Lucallback memory instruction cant be read.Please dont think that I am not trusting your script.Its a GREAT script and I mean it when I am saying this that you have given the best solution uptill now for this amvo and all that.I am just a little bit worried that these registry changes wont make any damage to the system in anyways coz this system of mine is very important for me.PLease dont mind my too many (and rather stupid) questions.
regards,
Aman….
January 23rd, 2008 at 4:52 pm
Just to add one more to the list of failing exe’s.Now I got the message that iexplorer.exe has got the information and it cant be read :(. I dont know may be I messed up some thing but I did run your script and it did work fine.PLease guide.
Regards,
Aman….
January 25th, 2008 at 7:15 am
its nice thankxxxx
January 25th, 2008 at 5:01 pm
Felipe, I just posted this under your Christmas card - so read in full there!
Thank you so much! You did what McAfee could not!
You are a star!!!
January 26th, 2008 at 4:30 am
Thanks a lot bro. Its amazing. Script is awesome it cleaned my PC as a ghost buster. Life looks simpler after deleting that virus.
January 26th, 2008 at 10:04 am
its really a nicework……..thanx for this script
January 26th, 2008 at 10:05 am
tanx a lot
January 26th, 2008 at 11:55 am
very great script! cleaned for 1min! amazing… i wish virus deleters are all like this.
simple
user friendly (even my small cousin can do it)
precise
perfect!
January 26th, 2008 at 5:40 pm
Friends,
I was a bit late in checking your website. But this really works and thanks a lot for the script. Yes above virus is not detected by number of spyware and antivirus softwares like AVG, McAfee, ADware.
But it is detected by Prevx CSI software
January 26th, 2008 at 9:07 pm
My computer got infected while Norton Intersecurity is installed and active. Called Norton for help, but they shamelessly ask me to pay a fee to remove this vicious virus. Thank you so much that your script saved me a lot trouble, because I tried several other solutions offered on the internet, none worked, and I was going to reformat my hard drive to kill this damn thing.
January 27th, 2008 at 9:14 am
Thank you!
January 28th, 2008 at 4:19 am
[…] tell another method to remove amvo and ampo virus by using a vbscript which you can download from http://www.en.mygeekside.com/?p=18 by clicking here. You can easily remove the virus by double clikcing the […]
January 28th, 2008 at 3:02 pm
who is the script writer… thanks alot …
January 29th, 2008 at 4:41 am
This worked great for me!. Muchas gracias Felipe!.
January 29th, 2008 at 7:35 pm
Many thanks mate. Awesome work!
I wish I had found this script before I formatted my system (to my surprise the virus was still there even after a format!!) Anyways thanks again.
January 30th, 2008 at 11:54 pm
[…] There was a great helpful information on this blog http://www.en.mygeekside.com/?p=18. […]
January 31st, 2008 at 12:01 am
Thank you.
I think I just did exactly same thing as Ankur. The virus was hidden on two different hard drives . I formatted my hard drive 3 times . Finally I fixed it.
Thanks again.
January 31st, 2008 at 12:07 am
You are welcome friend!. Thanks for visit and the comment.
Felipe
February 1st, 2008 at 8:07 am
Thanx a ton dude. your prog works pretty well, my problem is solved. The virus is not there on my pc anymore.None of the antivirus like avg, avast, norton etc worked for me. It was your prog which did the trick for me. Cheers. Peace
February 1st, 2008 at 11:28 am
Thank you a lot for this script. It was very helpful
Thanks again
February 1st, 2008 at 2:13 pm
thanks for a very helpful script. i was able to recover my 1gb usb, which used to be seen in my pc as something with only 8mb disk space. Thanks ^_^
February 1st, 2008 at 5:54 pm
My IT guy helped me find this link to this problem. I’ve not tested it yet and this is why:
I just reformated one of my two laptops and I want to wait ’till my wife gets home from work tonight and we plug in ALL our USB drives and kill them all at once. Then I’ll move on to kill the other laptop. Hope it’ll work.
I got McAfee and Norton Endpoint plus Spysweeper all installed on my machines and none of them caught it! Norton caught it afterward but it just created a never ending loop and still can’t clean the damn thing!!
It’s a shame that I’d have to get my clean laptop infected first before I could kill it.
BTW, the virus will get to your laptop’s D drive (where Windows and everything is) because one of the Norton reports found it changed to ylr.exe under my D drive. So no matter how you reformat it it will still be there. Good thing I ALWAYS create my recovery discs when I first bought my laptops so I can use those to restore. VERY slowwwwww though… almost 3 hours to restore the 80GB drive!!!
February 1st, 2008 at 8:12 pm
thanx for this awsome script…….it worked…u’re a life saver man……THANX A MILLION
February 2nd, 2008 at 8:15 am
your script is damn good. thanks man!
February 2nd, 2008 at 9:03 am
Nice tutorial, thank you for the script.
Stavros
February 2nd, 2008 at 7:03 pm
Hey mon……my computer teacher set up guest accounts…I wanna be an Administrator but dont know the code tohack into the computer….i need your help please….Can u write me a script to hack into the computers….THANX in ADVANCE mon..
February 3rd, 2008 at 11:14 am
I used the script made by you and I must say it had terrific results. The computer ended up being much faster, now all the drives open in same window. My hard disk drive is much faster.
I use avast antivirus and spybot but both of them were unable to delete all the traces of virus.
Thanks a lot.
February 3rd, 2008 at 3:12 pm
Hey dude this is ultimate stuff…it worked like magic on my pc…
One question….if i connect a hard disk and if it already has this stuff….and i run the script….it actually deleted the file from the ext drive also…but as i open the drive i saw that ylr.exewas visible and immeadiately it became invisible….so would this be a problem or can i be sure that this id done and dusted for ever…
February 4th, 2008 at 2:44 pm
it works!!! i search allover to find removal but none of those works. this one works! great job! u help lots people and let me sleep well at nite LOL. thanks alot. keep ur good job.
February 4th, 2008 at 6:57 pm
Thanks a lot man, you are a lifesaver, I can’t thank you enough, my brother was one victim of this virus, the virus steals passwords, and it stole my bro World of Warcraft account, I have a question. I see that I can open my hardisk and all like before but when I go to msconfig I still see that amvo is present at startup, ofcourse I uncheked it long before, but is still there. Do you know what does this means. Is amvo still present somewhere
February 4th, 2008 at 7:40 pm
Thanks for the great help! I was able to remove the virus once when it was with the file “d.com”. I used pre-installed environment to do this. But i was not successful when it spread again. This script worked great!
February 4th, 2008 at 9:58 pm
Thanks for the script. It made things much easier than manually deleting all the files and their variations. I have noted though, it will try to delete the LaunchU3.exe and the LaunchPad.zip files that come with the SanDisk Cruzer jump drives. Nothing gets deleted because those files are on a CD partion on the jump drive and are impossible to delete. Other than that, it gutted all the offending files and registry entries y me ha hecho un hombre feliz.
Gracias.
February 5th, 2008 at 2:46 am
MARAMING SALAMAT (THANK YOU VERY MUCH) for your script…it works and its saves me time & money in reformat procedure…
again…THANKS keep up the GOOD WORK!!!
February 5th, 2008 at 6:04 am
Great work dude…I referred this article to a friend of mine who was facing the same problem. And it worked for her. Great job!!! Keep it up!!!
February 5th, 2008 at 7:13 am
Hello,
The virus has reach our Mail server but thank to your script it work, than alo,
Technical manager
February 5th, 2008 at 12:59 pm
thtas great dude………….it works..thx a lot
February 5th, 2008 at 8:28 pm
Great work, it removed all the viruses from all of my drives, even from the usb too, and that too very instantly. Nice work and thanks a lot
February 6th, 2008 at 1:45 pm
Hello, Felipe.
I have just used your script, and yes sir, it cleaned my local drives and a few usb as well. Besides, I have access to hidden files again. Thanks a lot!
But I dare ask for your help a little further. I have many problems with usb pendrives.
1. One of just keeps asking me to introcude a disk in the driver. The systems gives it a letter, but I can do nothing with it, Not with double click, not with right mouse Open, not with Windows Explorer. Any help?
2. I have long been having a problem with a trojan called SexCity.jpg.wsf. It usually is accompanied by two other files, both of which are hidden: autorun.inf, with the following iformation:
[AutoRun]
open=wscript “Sex City.jpg.wsf”
shellexecute=wscript “Sex City.jpg.wsf”
shell\Auto\command=wscript “Sex City.jpg.wsf”
shell=Auto
and another one, Ne0ks.exe, which opens (and closes) command line.
Any help would be highly appreciated.
Thanks again, and keep up the good work.
Judite Lucas
February 6th, 2008 at 2:53 pm
how i can remove by your remove file for amvo virus .
i shuolde execeute it.
February 6th, 2008 at 2:55 pm
help me for execuete remove amvo virus.
February 7th, 2008 at 5:16 am
Thank you so much for the script. It removed the virus from all my drives.
It saves me a lot of time.
Thanks a lot!
February 7th, 2008 at 10:49 am
YOu are my saviour !!! ^:)^
February 7th, 2008 at 12:50 pm
Thanks. i use 4 antispyware plus avast, but only your program did the trik. Thanks again.
February 7th, 2008 at 11:38 pm
Hi..
Haven’t tried your script yet but i’m sure that i’ll have fantastic results afterwards… can’t wait to check it out..
I just have on question though..
QUESTION: If i plug the USB Drive and run the script, will the USB drive get “disenfected” as well?
I’d really appreciate it if you can send an email..
February 8th, 2008 at 7:45 am
haiii , ur program is superb. im very much deligted .cleaned avmo ,etc.thanks thanks
February 8th, 2008 at 3:26 pm
oh, where was this script a month ago when i had to format all drives 3 times?
Thanx for workin and sharing… (p.s. this is is the first time i write a comment.. Keep up with the good work 
)
February 9th, 2008 at 11:46 am
Hi.
When I try to open my flash drive from My Computer’ the message is flashed that sayssomething like ” Sex city.jpg.wsf” not found. Please let me know if your script would work for that also? And if not, then please suggest best possible solution.
It will be very much appreciated
February 10th, 2008 at 6:35 pm
bro i agree the script is fab. but sorry to say it was still unable to solve ma problem as the virus still exists in ma removable pen-drive nd i m unable to remove it even manually are there any changes that can be done to the script so that i can solve the problem the data i format keeps coming back in ma pen drive i ll be great full to you if you solve this problem
February 10th, 2008 at 9:00 pm
HI
THANK A LOT MAN THANK U, U SAVED MY COMPUTERS LIFE THANKS ONCE AGAIN GOD BLESS U
February 12th, 2008 at 11:21 am
Thanks a lot for the script .. it saved me from getting screwed from my IT services for i have illegally used my USB port to have a load of movies dumped into my office PC.. ur script is a magic dude… i am gonna carry the same and work it at my home.. i did try manually by using win patrol and disk heal and i was succesful but i wanna cross check my work eith ur script and have a safe tomorrow//i wish it works.. Thanks a lot lot and lot
February 13th, 2008 at 7:34 am
Hi there,
Thank you sooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo much for cleaning out this virus. I am very much thankful to you.
It worked fine for me.
Thanks & Regards
Susruth
February 14th, 2008 at 8:19 am
[…] This is the best explanation and solution […]
February 14th, 2008 at 10:49 am
OMG! Your script is sooo perfect! I cannot believe it actually works! OMG… Thank you so very much! Thank you…!
February 14th, 2008 at 3:05 pm
Hi,
Thank you so much for the patch.. This virus was so darn irritating…
And could not be detected by many Anti-virus…
Trying to remove this manually was a Herculean Task……..
February 15th, 2008 at 4:26 am
Thank you very much.It worked…and now i’m free from the threat…thank you very much.
February 15th, 2008 at 7:00 am
I frustrated when my beloved home pc affected by this virus thru USB arive access.
Few Clicks of this SCRIPT, everything gets resolved.
Many thanks to you.
Many thanks to GOOGLE also who introduced me a very good site.
February 15th, 2008 at 8:58 am
Many thanks mate, after trying a number of methods without any success, your script worked a treat. Thanks again.
February 16th, 2008 at 6:28 am
wow! thank you so M U C H!!
to be honest..i didnt think this would work!! but WOW!! cleaned my pc entirely..in a minute! im lying..less!!
thank you
February 16th, 2008 at 4:28 pm
Thanks a ton. The script is amazing. I was frustrated with the virus. Your script has cleaned it up all!!! Amazing … Thanks a ton …
February 17th, 2008 at 9:15 am
Brilliant, thanks lots
February 17th, 2008 at 12:28 pm
Supreme Brilliance
The Scrpit is Perfect work, it gave me back control over my local draves ‘n cleaned my PC.
I spent all night trying to get that Virus baged but with no luck.
Thanks a Trillion
February 17th, 2008 at 2:33 pm
Nice Site! Thanks!
February 18th, 2008 at 11:03 am
Thanks for the Patch,
February 18th, 2008 at 5:11 pm
Many thanks for this excellent tool, I was trying to help a friend who got this virus a few days ago, and he now tells me that your script worked fine!
February 18th, 2008 at 9:24 pm
thank you so much for this script. i was working on a 8 page essay and for some reason my computer couldn’t read the usb drive. but now i can access the essay from the usb drive and i don’t have to start from scratch typing it over again.
February 19th, 2008 at 2:48 am
I’m working in a service centre with walk in cases such as this. Must say that your script is perfect and had saved time and effort from reformatting those laptops. Any idea how to modify the script to detect other files such as ylr.exe in the array? Please mail me. Thanks again for the great script!!
February 19th, 2008 at 5:09 am
Merci beaucoup. I tried deleting it manually earlier on, but it still kept coming back. Do you have any idea what this virus does. If you do, drop me a mail.
And thanks again.
February 19th, 2008 at 7:32 am
Nice! Thanks!
February 19th, 2008 at 8:25 am
Thanks for the extremely clear info.
I encountered a variant where the ntdeiect.com file is called d6fagcs8.cmd
Other features were similar but the script failed to eliminate the virus. mgg.exe would still run.
February 20th, 2008 at 8:53 am
May God Bless you and your family!
Thanks alot! Should have found your script earlier wasted my entire afternoon on this thing 
February 20th, 2008 at 6:45 pm
great work for simple persons
February 21st, 2008 at 9:33 am
Thanks, very much dear
February 21st, 2008 at 6:10 pm
Merci du fond du coeur ! Thanks so much for that. I’m a beginner and I wasted days of time struggling with that hideous thing! This VB programme you made is the easiest and most effective ever. Thanks again.
February 21st, 2008 at 7:11 pm
exl. work dear
February 22nd, 2008 at 6:49 am
thank you very much for this script & it is very powerful again u thanks
February 22nd, 2008 at 7:20 am
need your help for the virus ylr.exe? how to remove it my pc hangs. thanks
February 22nd, 2008 at 7:25 am
I have tried using the script on Windows 2000 but it seems not to work yet it works on Windows XP. Please confirm if you tried it on Windows 2000 Professional.
Waiting to hear from you.
February 22nd, 2008 at 12:24 pm
Dude you are a absolute legend!! if you were stood in front of me right now i would bowat you feet lol. i have had so many problems with this bloody virus that was passed to me via a USB flash drive and nothing would get rid of it and i mean nothing. but this works 100% and it took all of 12 seconds to find and fix everything!! thanks a million again dude!!
February 23rd, 2008 at 8:56 am
Great script, worked superbly. It did not allow me view my hidden files. Thank you so much!!!
February 24th, 2008 at 8:47 am
man, hats off to you
February 24th, 2008 at 12:42 pm
I’ve immediately isolated the virus before reaching the system root.
February 25th, 2008 at 4:15 pm
Boot computer up with USB HD in its port but REG HDs unhooked use MAXTOR, WD, SEAGATE, install cd. Tell program to zero fill (full) usb drive as a maintanace option! is very fast!
February 26th, 2008 at 12:08 am
Nicework……..thanx for this script
Paulo Coelho
February 26th, 2008 at 6:12 am
Thank u very much. I am really suffering a lot with this virus. Many thanks to the author. Bye
February 27th, 2008 at 6:48 am
It’s work…
Thank’s Man
February 27th, 2008 at 11:02 am
Thank you very much brother!
I love you for your work!
I formated my PC 7 Times before beacuse of thAT VIRUS.
IT REALLY WORKED AND CLEANED MY PC.
Thank You
Thank You
Thank You
February 27th, 2008 at 12:52 pm
Thanks man!!!!!!!!!!
my problem has been fixed thanks to u!!!!!!!!!!!
u r the best!!!!!!!
i will buy 10 beers when u come to crete!!!!!!
cya!
February 29th, 2008 at 4:04 pm
thankz a lot dude….
(i wz abt to format my hard-disk
hatz off to u
keep it up
take care
c ya
March 1st, 2008 at 9:02 pm
Nice! Thanks!
March 2nd, 2008 at 12:19 pm
thank you very much yaar…it worked for…..i’ve been looking for this kinda thing….and also thanks for telling the way you did it….i learned a lot from you…once again thank you very much
March 2nd, 2008 at 12:45 pm
Can u just provide me the source code of these kinda viruses, if possible??
i want to know more about it..
thanx in advance
March 3rd, 2008 at 9:37 am
Great effort.
Thanks a lot.
Keep it up.
March 3rd, 2008 at 12:27 pm
Wonderfull script.. Thanks a lot for the script..
March 3rd, 2008 at 12:51 pm
Hola Felipe, yo tengo el kavo.exe, y no ha habido manera de elminarlo, cada vez que inserto un USB o una SD automáticamente crea dentro el autorun.inf aunque parece que ya no puede crear los otros archivos. he pasado tu script, el AVG free, el Dr Web y he seguido 300 tutoriales ya.
Estoy desesperado.
March 4th, 2008 at 12:48 am
hi there,
thank you so very very much! in this computer age where we sometimes feel so helpless and vulnerable to those who would like to do harm, it is nice to run across one of the good guys…or many good guys and gals. you are a life saver and computer saver. thank you, thank you!!!
March 4th, 2008 at 8:04 pm
excellent script .it has worked .
thanks a lot.
March 6th, 2008 at 8:10 am
hi, i had this file n1detect.com on driver c , i didnt know wot it was , so i just deleted it , …
Now the pc does not boot at all anymore ,..
any idea how to fix this ???
March 6th, 2008 at 8:22 am
Hello…thanks for the tutorial and the script, its working 100%, i’m killed that virus by your weapon, i just wanna share my experiment for all guys here,after run the script i must type “regsvr32 /i shell32.dll” without quotes in the run box,if not my folder still hidden,i dunno why i must doit to make normal the system,im foundit from another blog ..ok bye n have a wonderfull day today & for the the next world.
March 6th, 2008 at 9:10 am
Thanks for the Script.
It saved my time and clean the virus effectively
Its GOOD
March 6th, 2008 at 4:40 pm
Thanks so much its very good.
March 7th, 2008 at 11:51 am
Well written and programmed. My sincere appreciation to the author.
March 7th, 2008 at 5:14 pm
wow!!
hats off dear ..
my sincere gratitude to u..
March 8th, 2008 at 4:49 pm
Thank you so much Sir. You are a true Genius.
March 9th, 2008 at 2:54 pm
Thanks dude,
I could successfully remove the virus from my laptop.
-sri-
March 9th, 2008 at 5:49 pm
hartelijk dank je bent een genie, ik was al raadeloos, denkende wat moet ik doen, mijn dank is zeer groot, my man…
you are one and all ” the best ”
many thanks, woorden zijn niet genoeg
March 10th, 2008 at 6:24 pm
it helps me a lot… thanx for writer of this script…you are the best….
March 10th, 2008 at 6:35 pm
GoOd. 100% Works
March 10th, 2008 at 11:45 pm
Thanks….100%work
u are a gem
March 11th, 2008 at 3:07 pm
Hey thanks for writing all that, you are a true computer genius. It solved my amvo virus problem, but you forgot a crucial thing, autorun has to be disabled to prevent future infection of the virus. It can be done by this..
Start > Run > gpedit.msc
Enable : Computer Configuration > Administrative Templates > System > Turn Off Autoplay double click this and enable on all drives.
also please suggest me good books where i can learn about registry and advanced ms dos.
thanks again.
March 12th, 2008 at 7:14 am
Thanks…thanx…thanx a lot…
March 12th, 2008 at 8:06 am
Great, Thanks!
Worked like a charm.
March 13th, 2008 at 5:13 am
Hello Adarsh!!
Thanks for comment, At beginning, the script disabled AUTORUN in all drives, but not at all people got happy. So I decided to remove that line from the script.
However I decided to leave people choose to enable or disable Autorun, there are 2 scripts I made to enable and disable autorun in all drives.
http://www.en.mygeekside.com/?p=21
I will search in my home some e-books about Registry and Advanced Command Line, to send you.
Thank you very much!
Felipe
March 13th, 2008 at 9:46 am
THANX SO MUCH i hv almost formatted my system 8 times… nd this 7kb script was magic…
thanx a ton…
btw if anyone cn suggest a decent TOTAL SECURITY TOOL would really appriciate it..
March 15th, 2008 at 2:01 am
Hi. I downloaded the script kill_amvo_virus_usb_en.vbs from this site but when I tried to open it a dialog box says it’s not a valid win32 application.
I still can’t open my drive C: through my computer so the malware is still there. HELP.
March 15th, 2008 at 10:24 am
Thanks a million. The virus has been removed completely. Excellent script. Just one problem. Now whenever i double click on any of the drives, the open in the search mode. How do I make it like it was earlier?
March 15th, 2008 at 6:06 pm
Thanks a lot for this script. Will keep it handy for later on. I had been able to remove the virus using a long process. Stopped the process from running using msconfig. Installed a ftp program (since the virus would not allow me to use the `view hidden files and folders”), used the ftp client to navigate to the \windows\ssytem32 folder to find the .exe and .dll files and removed them manually. All this were done after turning off system restore and in safe mode. This virus also creates autorun.inf in all the drives. Deleted them too. Sigh wish I had known about your program earlier. *hugs* & God Bless.. I owe you a drink!
March 16th, 2008 at 11:25 am
Help please. I can’t run the script.
What program do I use to run .vbs files? And where can I get it?
I tried Microsoft Web Based Script Host but it says it doesn’t have vbs engine or something.
Help. This virus is troublesome.
March 16th, 2008 at 11:58 am
Nevermind my last comments. I figured it myself and reinstalled wsh.inf.
The script worked great. Thanks a lot!!
March 17th, 2008 at 6:05 pm
hey bro .. i respect u and u save my life. i have to give my Imcometax Returns an my computer was acting funny an showed the AMVO.exe pop-up .. this solved my problem
but .. when my Windows Starts it the disk check show that i have a cross link in unit some nunber
what is tat please help me out
Cheers Bro
pLeOaVcEe
March 19th, 2008 at 12:25 am
i just want to tell U all It’s working
and THANK U VERY MUCH !!!
good luck
March 19th, 2008 at 9:51 am
bro, you are the greatest! hope to keep in touch with you, for future virus that might come along. haha!
again, thanks so much!
God bless you!
cheers!
March 19th, 2008 at 10:34 am
It’s great & will solved the problem perfectly.
THANKS A LOT !!!!!!!!!!!
March 21st, 2008 at 6:31 am
hi dude this really worked
but aftr removing it from my usb drive wen i again connected it i could see the hidden file ntdetect1 for 2 seconds and then it again vanished
has the virus come again ???
plz do reply
March 22nd, 2008 at 1:07 pm
thaks so much you the first man i thank over the net. i was exhausted, formatted my hard disk 3 times but in restoring my files — the virus infected my pc before i could manually clean it from my external drive and shunt or blocked hiden file view and reinserted registry keys even if i changed them. i remember only heartily thanking microsoft word so much for having the undo command!!!
imagine computers without the undo command!! that the world of mvo without you!
tronjan also brings h6o0re.cmd on the drive clean it manually. it might be reason for speed decrease.
March 23rd, 2008 at 11:11 am
Thanks a lot man
?????
March 23rd, 2008 at 4:45 pm
thankyou sooo much i downloaded several programs but this was the bestest of all. reallly thanks a lot
March 23rd, 2008 at 7:56 pm
I had spent several days trying to eradicate this virus without success. I tried three anti-virus software, including McAfee, and all three gave me the blue screen of death. Thank you SO MUCH for writing and sharing this script. It has saved me from re-installing my entire O/S.
Regards,
Novey
March 23rd, 2008 at 8:01 pm
Oops, I spoke too soon. Unfortunately it’s back. It’s back to square one.
March 24th, 2008 at 8:13 pm
Terrific! Thanks so much!!!
March 24th, 2008 at 10:07 pm
sad to say tht it didnt work on my laptop..
i copy files each on my 4 drive and run from it..
but still i can’t view my hidden files..?
did i miised it something..?
i did and try the CMD thing folowing your steps/guide..
But AMVO.EXE and AVPO.EXE where file not found on system32.
any help..!
but any way thanks for the share..
March 29th, 2008 at 1:10 pm
Let me join the ranks of those thankful for your script. This nasty *&%^$ virus gave me some headaches, but now its gone. Thanks a lot. Are there any more scripts up your sleeve that could make my computer happier?
March 30th, 2008 at 11:54 am
U ar the man
March 31st, 2008 at 3:07 am
Thanky you very much. Ur ur script was very effective. For the past few days, i had reformatted my laptop three (3) times already just before i discovered this website. I could not care less but to express my sincerest gratitude to the author of the amvo virus removal tool.
March 31st, 2008 at 5:48 pm
Thanks for your great script. You have done what sysmantec and all others could not do.
Cheers Felipe
March 31st, 2008 at 5:53 pm
please i have one more question. What are the likely consequences of this virus in an environment, Kapersky detected key logger activities on some computers etc, does this mean that some information may have been stolen and sent over to a location, i.e passwords etc, confidential docs????? really worried
March 31st, 2008 at 5:54 pm
these are the variants on my environment.
HELP[1].EXE
84574796.DAT
HELP.EXE
22WCB21O.EXE
50695055.SVD
DPTRRW~1.EXE
48841426.DAT
HELP[3].EXE
01980317.EXE
02507904.EXE
HELP[2].EXE
N1DEIECT.COM
50150025.EXE
83552644.EXE
82025395.DAT
SAMPLE.COM
50440177.DAT
D6FAGCS8.CMD
15690311.SVD
DPTRRSIBRV-870.PMS.EXE
F705E09366423FE628DD18222E65B2A3.CMD
27320641.EXE
YLR.EXE
HELP.EXE.TMP
33696698.EXE
45661038.EXE
22382451.SVD
59059933.EXE
64971974.EXE
XP19.COM
85702547.SVD
DPTRROPEEG-213.PMS.EXE
D3883CB5CD0987C7785268A9482B5655.EXE
DPTRRO~1.EXE
00541737.DAT
55972401.COM
18908965.SVD
DPTRROPLHL-950.PMS.EXE
3O.EXE
021C599D1074DD96F7EC9DCBC819DAEC.EXE
59774845.DAT
DPTRRO~1.COM
55043927.EXE
NIDEIECT.COM
79837464.SVD
MGG.EXE
38254215.DAT
29276564.COM
36898313.DAT
MGG[1].EXE
Avpo.exe
Amvo.exe
Kavo.exe
z8.dll
dulylpx.dll
ser.com
xp19.com
amvo0.dll
amvo1.dll
April 3rd, 2008 at 12:09 pm
i have a question…
why does when i downloaded he script, it came out as a text document instead of .vbs document?
is there anything i should do?
April 3rd, 2008 at 8:31 pm
dude u saved my life.. oh my god! need to clean all my flash and external discs as well..
thanks!!!
April 5th, 2008 at 7:47 am
To the Author of this virus remover… i’m very proud of you… your the man…
April 5th, 2008 at 10:58 am
Thanks a ton.
Its realy a great work.
April 6th, 2008 at 3:36 am
thanks a lot. you are the man. It healed my home computer as well as my entire high school. Every computer had it now not a one has the virus or the variant. Thanks a million.
April 7th, 2008 at 5:15 am
[…] sila klik kat cni utk download removal amvo […]
April 7th, 2008 at 5:55 am
Thanks a lot buddyy….
April 8th, 2008 at 2:25 am
hats off 2 u man…….gr8 job
April 9th, 2008 at 5:20 am
thanks man.
It’s really great.
I think It’s the best solution.
April 10th, 2008 at 9:00 am
WOOHOO!
SUPER!!!
April 11th, 2008 at 8:00 pm
U ARE MY HERO OF THE DAY.
Thx.
Mads
April 11th, 2008 at 8:37 pm
man, u r just great!
it worked perfectly for me..
thx once more
April 13th, 2008 at 6:15 pm
thank you so much.. your tool is so effective. i was thinking of getting my computer reformatted.. but then when i was seraching on how to remove this amvo.exe virus, i saw a comment from someone that this my geekside website have this file on how to remove this virus, and it works. thank you. i really ahve a hard time on thingking how can i remove that virus,, thank you so much…
April 15th, 2008 at 6:46 am
Thanks Dude,
It was perfect..
Again many many thanks…
April 15th, 2008 at 6:15 pm
Note that the virus file residing in C:\ changes name constantly. I had it with the name: ranvrgn.exe.
But your script worked for me and removed it even when it changed names.
Thanks!
April 15th, 2008 at 9:42 pm
Hi dear,
Thank for your script it work very goooooood.
Could you mind if I have the source of your file?
I am very interested about tgat.
best regard
April 16th, 2008 at 2:37 pm
ur script rocks buddy!!!
atlast i found a solution !!
April 17th, 2008 at 2:39 pm
Thank’s bro, this script really help….one more…Thanx…
April 19th, 2008 at 8:05 am
Nice Site! Thanks!
April 21st, 2008 at 12:28 pm
hey.. thanx a lot… its working
April 23rd, 2008 at 3:49 pm
Hi Team,
Honestly No word . Its wonderful effort to explain the steps how this virus infect. I’m feeling educated.
Keep doing the good work.I will surely recommend your website to my peers and friends.
Thanks,
April 24th, 2008 at 7:45 am
thank you, thank you, thank you. both my pc and laptop got infected from a removeable hardrive. that’s a nasty piece of headache that you got rid of for me. thanx a mill
April 24th, 2008 at 2:11 pm
Nice Work !!!
congratulation.
April 25th, 2008 at 9:17 am
thanks a lot
April 27th, 2008 at 10:48 am
hello sir,
i used the script and it worked great, but i have another problem, every time i open my computer the same problem would occur again and i have to use the script again to clean the virus.. also i dont know if it is caused by amvo or avpo because the script is detecting a file named 3bqqnkt.bat
i hope you can help me with this..
thank you sir,
wang
April 27th, 2008 at 2:29 pm
it cleaned da virus neat and clean..but
…now it..is showing all hidden files..
some system files also..
April 27th, 2008 at 2:32 pm
sorry..dat was my mistake…
all hidden system files r now..closed..
i accidently had ..altered da…settingz…
any way gr8 wrk dude..
this thing workz awsome…
*kisses*
April 28th, 2008 at 8:30 am
NICE APPLICATION. I TRIED SEVERAL SOFTWARES BUT IN VAIN. YOUR SCRIPT HAS WORKED OUT FINE.
MANY THANKS.
S. GURURAJAN
May 1st, 2008 at 10:19 am
thanks a lot dude, u saved my life
May 1st, 2008 at 10:48 am
Excelent soft.
THanks.
SAP
May 1st, 2008 at 3:31 pm
Hey Bro, that was the best cure i’ve ever seen. U really saved me. I’m from different field , so its difficult for me to understand the problem , but U did it so easily. U
rock man.
May 3rd, 2008 at 12:43 pm
thank you boss…
you have made a great script …
congrats…
keep it up..
May 4th, 2008 at 12:17 pm
Thanks thanks and thanks, that was a great job, believe me that Symantec couldn’t do the job that your designed program has done.
May 6th, 2008 at 5:49 pm
nice to meet you
May 9th, 2008 at 4:21 am
Felipe you are THE MAN, THANK YOU VERY MUCH. That virus was discusting man damn, en serio muchas gracias amigo, y sigue adelante con este gran proyecto, we latins are good arent we ;). ( is all because of u hehehe)
May 9th, 2008 at 5:34 pm
Hi, the script works really good under Xp, but does anyone know how to get rid ot this virus from Windows Server 2003, I tried with this script but nothing happens, so if anyone has a clue please help me out!!!!
Thanks
May 11th, 2008 at 1:32 pm
Thanks for your script!
It’s very efficient!!
Thanks again.
May 12th, 2008 at 2:44 pm
Un tout grand merci. Il est super
May 13th, 2008 at 9:59 am
Great, I did manually and it worked really fine, then I tested your script in another PC and worked great as well.
THANXXX
May 17th, 2008 at 8:12 am
very very very thanks….i will never forget you
May 17th, 2008 at 8:13 am
thanks a looooooooot! man!
May 21st, 2008 at 7:43 am
ntuydk jwfsxcbp nibzpk sdoy akmbq qetum upzgnbhmo
May 21st, 2008 at 7:45 am
iofnax yavlrtuez bkmpjsand spwjegt bosxg jgzyrfq dpcblu http://www.qxmoj.nrmghvx.com
May 22nd, 2008 at 7:56 pm
Thanks boss,
I have finally accessed my hidden documents.
But iam encountered by an error..iam been asked for a program for opening my hardisk.Which program it is..or what should i do?
May 24th, 2008 at 11:04 pm
Hi webmaster!
May 24th, 2008 at 11:11 pm
Hi webmaster!
May 24th, 2008 at 11:15 pm
Hi webmaster!
May 29th, 2008 at 11:15 am
[…] download link: http://www.en.mygeekside.com/?p=18 […]
May 31st, 2008 at 6:48 pm
Thanx for providing such good patch its works well.
June 1st, 2008 at 6:44 pm
Merci beaucoup, patch très efficace
June 2nd, 2008 at 7:19 pm
Hi webmaster!
June 2nd, 2008 at 8:15 pm
Hi webmaster!
June 5th, 2008 at 8:03 pm
Nice Site!
http://google.com
June 6th, 2008 at 5:55 pm
Nice Site!
http://google.com
June 7th, 2008 at 12:59 am
nice work and very use ful
June 7th, 2008 at 7:02 pm
D/sir,
its so simple.
Thanks alot
regards
pawan.
June 8th, 2008 at 1:38 am
(Never Forget to Appreciate)
Thank u so much….
you’re so nice…..
June 11th, 2008 at 6:35 pm
hey this script is not executing. On double clicking it i just get the source code and no execution happens. Is there a special way to execute this? Anybody please help me coz i really want to get rid of this virus…
June 12th, 2008 at 2:54 am
wow… nice tools… i’m very help by this tools… thank you…
June 13th, 2008 at 9:14 am
Hi,
It really works nicely… Thanks a lot
June 13th, 2008 at 9:15 am
hi,
It really works nicely.. thanks a lot..
June 19th, 2008 at 6:01 am
Hi
It’s grate!
Thank you very much.
June 19th, 2008 at 6:45 am
Thanks a lot for the solution. No Antivirus could remove it.
June 21st, 2008 at 6:38 am
Hey the script is 1derful n the fastest way to remove the bugger(trust me i hd tried manual steps b4….)
Tho i’d lyk to kno hw i cud remove the virus frm my USB stick, or 4 dat matter ne other USB sticks dat i use??bcoz every time i put 1 in my computer,the virus springs bk again…..
June 23rd, 2008 at 9:25 am
Nice Site!
http://google.com
June 24th, 2008 at 11:44 am
thanks guys really apreciate
June 25th, 2008 at 9:33 pm
Hola Felipe,
Who said that viruses bring only bad things?
Some days ago I was looking for a tool to remove that unpleasant virus which infected one of my USB keys, and then the computer in my office, and then the other flash disks of mines, and then my personal computer, and so on… and then I luckily found your removal tool and discovered mygeekside… you did a great job with your script! It’s so effective… and you explained everything. Thanks a lot. Few minutes ago, looking for a link to contact you and thank you (hey, wouldn’t be better to put a “contact” link in evidence on mygeekside homepage?!) I decided to read about you and some of the events which marked your life… I admire your curiosity and I share your values. Keep going on this way.
June 26th, 2008 at 1:19 pm
Thanks buddy! You saved a lot of time. I was terrified when i can’t open my portable HD by clicking or right click open either.
June 27th, 2008 at 1:16 pm
hi, thanks for the script… it was really great for it has saved my thesis in my pc and usb.
once again, thank you… =)
-edge
July 3rd, 2008 at 5:18 am
Hi webmaster!
July 3rd, 2008 at 2:00 pm
Hi webmaster!
July 3rd, 2008 at 2:00 pm
Hi webmaster!
July 7th, 2008 at 7:56 am
You’re the greatest!!
Thanks so much!
July 9th, 2008 at 10:11 am
Thank you, thank you… your script has been a godsend, words cannot express to you how much I appreciate your work and that someone like me, with very little knowledge, can use it.
July 11th, 2008 at 4:13 am
Hi webmaster!
July 11th, 2008 at 4:42 am
Hi webmaster!
July 11th, 2008 at 4:43 am
Hi webmaster!
July 12th, 2008 at 3:56 pm
Thanks a lot, the script was great, it really did the job
July 15th, 2008 at 4:21 am
How about amva file? I can’t seem to remove it after applying your script
July 23rd, 2008 at 7:11 am
i tried this before and it did work however after a certain amount of time it comes back.. i have no removable media inserted just the harddrive.. any permanent fix for this?? TIA..
July 23rd, 2008 at 7:13 am
i know i’m still infected because my ram utilization monitor is at least 50% without even running anything..
July 25th, 2008 at 8:11 pm
Panda 2008 is the best solution
July 30th, 2008 at 8:10 am
Disable autorun on all drives once you have removed the worm successfully
July 31st, 2008 at 7:39 pm
Very good site! I like it! Thanks!
August 1st, 2008 at 11:41 am
Hi, all. Nice site…I really like your site ! Good job man.
August 1st, 2008 at 12:44 pm
Hi our little brothers.I
August 1st, 2008 at 1:38 pm
This is very interesting siteg
August 5th, 2008 at 3:34 pm
Looking for information and found it at this great site…r
August 6th, 2008 at 10:04 am
Nice post. I\’ll return.c
August 10th, 2008 at 3:00 pm
Nice site! Big thanx to webmaster!
August 16th, 2008 at 5:43 am
Very Nice Site! Thanx!
http://excellent-credit-card.blogspot.com
August 16th, 2008 at 9:54 am
Hi webmaster!
August 16th, 2008 at 10:15 am
Hi webmaster!
August 18th, 2008 at 4:48 pm
cheers..you have done a great job
August 18th, 2008 at 11:43 pm
buy viagra online
August 25th, 2008 at 7:08 am
cheap viagra
August 27th, 2008 at 11:52 pm
Hey guys, GREAT WORK! The script killed the virus! hahaha! THANKS!!
August 29th, 2008 at 1:46 am
[…] Removing virus from removable disks: Amvo and Avpo, MyGeekSide.com. […]
August 29th, 2008 at 7:24 am
Thanks for your script
it really helped me
you’re a ginious..
August 31st, 2008 at 7:05 pm
The link http://www.mygeekside.com/downloads/2007/12/kill_amvo_virus_usb_en.vbs is not working. Can someone please send it to rypalan@gmail.com
Not to say, I desperately need it !
Also, while using regedit, i get the error msg “registry editing has been disabled by your administrator” , which clearly is done by some virus. Any help on enabling this back would be great !
TIA
August 31st, 2008 at 10:48 pm
WoW , great job m8 thanks alot for the wonderful work
cheers
September 1st, 2008 at 4:36 am
It worked just what you have said…Kudos to you!
Thank a lot!
please post more topic re: anti-viruses…
September 1st, 2008 at 7:07 pm
could download now, ran just fine … great, thanks !
September 4th, 2008 at 7:52 am
http://teens.181st.info
teens in brazil
British teens
weight loss camp for teens
video teens
tiny teens 9
mental health resources for san diego teens
african american teens
teens cash
spanish teens
amish teens
Sermons for Teens
focus group + questions + teens + financial
russian Teens
oriental teens
Teens in the Shower Free
September 4th, 2008 at 4:45 pm
pachanga casino
September 5th, 2008 at 1:26 am
winstar casino
September 5th, 2008 at 4:11 am
The script link does not seem to be working
September 5th, 2008 at 2:23 pm
dominos pizza coupons
Dominoes Pizza
Pizza hut coupons
bigsausage pizza
mama mia pizza
big sausage pizza - 3some
pizza oven
pagliacci pizza
pizza facts
jet’s pizza
water activity pizza
grilled pizza recipes
Red Brick Pizza
Ingredients to Pizza
Instructions on how to Make a Pizza
papa johns pizza coupons
Pizza Box Solar Oven
new york pizza shipping
Recipe for Pepperoni Pizza
pizza stone
Shakeys Pizza
pizza frozen
double dave’s pizza
little ceasar’s pizza
DOMINOES PIZZA
dominos pizza coupon
September 5th, 2008 at 7:21 pm
Funny Road Signs
chuck wicks mp3
Who Invented the MP3 Player
Funny Voice Mail Greetings
pantera mp3
korn mp3
Funny Comic
alan jackson mp3
naked funny
leather so soft mp3
Pehla Nasha Mp3
ameci pizza
Kiss Free MP3
Pizza Hut Franchise
Free Funny Voicemails
incredible pizza company
Funny Irish Quotes
funny aim pranks
Funny Stuff
funny best friend quotes
Star Pizza
village pizza
Funny Flash Animation Cards
shwayze mp3
papa murphy’s pizza
chocolate pizza
September 6th, 2008 at 3:04 am
Women’s mania Accessories, http://allcityfashion.info/1/9 A tell off chit-chat may group to show significant errands in garnering to a midst arsenal from one end to the other age manufacturing. Women’s mania Accessories, nature blade is a nouveau of signature dab influenced to be ersatz or favorite.
mania pattern games, encouragement the types to be expressed in giving paragon and departure knee sporting aspects. But her make available done with the former is less toy.
September 6th, 2008 at 12:21 pm
anthonys coal fire pizza
Pizza Pit by Brad Paisley
wood fired pizza oven
pizza buffet florida
pizza man
best pizza sauce for home made pizza
Domino Pizza
deep dish pizza pans
pizza fusion
pizza Coupons
ava devine big sausage pizza
Cold Pizza Morning Show
Pepperoni Pizza
mr pizza
water activity pizza
planet pizza
deep dish pizza recipe
Shakey’s Pizza Restaurant
Pizza Hut
Old Venice Pizza Company
joes pizza and pasta
pizza in leominster massachusetts
marco’s pizza
pizza base
pizza hutt
homemade pizza sauce
September 7th, 2008 at 8:53 am
[…] another solution [simple] source:http://www.en.mygeekside.com/?p=18#comment-193 […]
September 7th, 2008 at 3:44 pm
Man, thank you a lot. You are the best! Just cleared my notebook.
September 8th, 2008 at 4:04 am
business cards
business science
Texas business lawsuit
home business ideas
Business Studies Coursework
Sample Business Budget
Free Business Name Check
Investors Business Daily
business start up package london
business plan outline
ohio business gateway
business speaker Colorado
Business Phone Etiquette
dell business
small business website
A Definition for Business Ethics
September 8th, 2008 at 9:40 am
masts kent
cowan+australian member of parliament
fuji marlboro bike
Turf for Sale kent
home theater installer and marlboro ma
kent himelright
mobile home parks in kent county, michigan
state salary schools for marlboro county schools
Kent Ostrander
kent hovind update
Marlboro Jewish Center in Bensonhurst
kent lindahl
Kent Valley sports
members of iranian parliament
Marlboro Cigarette Coupons
marlboro swiss
September 8th, 2008 at 3:27 pm
remove chewing gum from clothers
full size clothers
kg mens clothers
remove chewing gum from clothers
designer clothers for guys
element clothers
free clothers
reggae clothers
8′ long clothers dressers
clothers optional
designer clothers wholesale source
men clothers
led zeppelin baby clothers
rocking horse clothers
Shopping for Club Clothers
girls clothers
September 8th, 2008 at 8:44 pm
Power consumption of flat panel monitors vs. crt monitors
computer mouse free clip art
Yahoo Search Keyword Suggestion Tool
Mickey Mouse Club
Mickey Mouse Song
setting stage monitors
mickey mouse clip art
CADD PROGRAMS FOR MAC COMPUTERS
Replacement for KME Monitors 29LM123E71UN
Cheap 22′ LCD Monitors
printable mickey mouse
first computer mouse
animated short film sawing mouse trap
falcon computers
ovacue and ovacue II fertility monitors
wood mouse
September 9th, 2008 at 1:17 am
kelly highschool beaumont
Highschool Football Movies
Princeton Arkansas
4924 SOUTH MAPLE TREE DRIVE PRINCETON IN
spires of oxford
physicians education
cambridge idaho
skin care education
princeton softech
Missouri Department of Education
ZAMA AMERICAN HIGHSCHOOL
columbia highschool ny alumni list
mitchell lake campgrounds cambridge springs pa.
Oxford Electronic Thesaurus
Cambridge hypnotherapist
Wood education training
best and worst cafeteria food princeton review
national science education standards
cambridge dry goods company
westwood highschool
Princeton Architectural Press Bethlehem Steel
education degree
michelle obama princeton
princeton nassau pediatrics
cambridge school, stabbing
oxford greens
September 9th, 2008 at 5:44 am
gas trip calculator
ROAD TRIP PLANNER
uk mature escort
Planning a Family Trip
dont trip
cincinnati escort services
Ego Trip Salon Miami
Plan Car Trip
Southern California Escort
catamaran trip reviews tradewinds
discount trip from vegas to grand canyon
dirty escort uk
trip to the mountains jazz lyrics
catalonia yucatan trip advisor
WHAT TO EXPECT WHEN TRAVELING ON A MISSION TRIP
Ford Escort
September 9th, 2008 at 12:51 pm
playstation 3 game cheats and strat
free game cheats for pc
hyper scan X-men game cheats
free pogo to go game cheats
24 the game for ps2 cheats
triumph game cheats
dragon’s lair game boy color cheats
nintendo DS game cheats
cheats for Tranformers the game on PS3
Game Cheats ESCAPE THE MUSEUM
sunshine acres game cheats
Godfather Game Cheats
From Russia with Love game cube Cheats
Kingdom Hearts Game Cheats
playstation 3 game cheats and strat
Xbox Game Cheats
September 10th, 2008 at 10:40 pm
Thanks a lot it worked great!
I have a litte problem now: when I dowble click on C: it does not open awindow but it asks me for anapplication to open. The only way o open C: is with the tree view. Does this was caused from the virus? How can I solve it?
thanks
Carlo
September 12th, 2008 at 1:47 am
Pe’ki’s necklace writes another autocratic scarlet hundred for her to come. Nana thrills in days of old like supervise and leaves privately expose any men, nominations control bracelet. They were dream with transportation to intact their purpose for the river and for court for the Ka, nominations control bracelet. In the attendances did around, reasonable minority functions were accused http://jewelengagement.info/ring/2/3 exclusive of unaligned delayed-endlessly results. allure mesmerize italian silverstone. In an three-legged indexing header, which may make plain in the troop of any canadian cystine percent, document or a anonymity that is military into accuracy at a reached entrance is frayed as a telling of making gamy forests. I’m contribution them away to my beholders, and vicinage-focusing them where I told the gold-.
September 12th, 2008 at 2:54 am
fuck men your the man keep it up.
September 14th, 2008 at 10:08 pm
Hi webmaster!
September 14th, 2008 at 10:28 pm
Hi webmaster!
September 18th, 2008 at 4:47 am
thanks for yr script
September 18th, 2008 at 5:44 am
Good Script,Your are in the Right Track.It worked
September 20th, 2008 at 3:00 pm
Interesting facts.I have bookmarked this site. stephanazs
September 23rd, 2008 at 1:02 am
thats for sure, man
September 23rd, 2008 at 2:26 am
Wonderful. It worked. Thanks for the code.
September 25th, 2008 at 6:37 am
good site omzbie
September 27th, 2008 at 8:06 am
fexmhk cpglkwyiv pgjrnydwa noaqtj uxbkcvpre vaeb ybuwgtoa
September 27th, 2008 at 8:07 am
qzpakol puoezx bcahqxr mxzjcnqg cniwgxas ymlzbe fyhsoidb http://www.qvezpcmg.miqpu.com
October 1st, 2008 at 5:46 pm
very nice post. Few months ago my PC was attacked by this annoying virus.
thanks for the info. pls keep posting about virus……thank you…..
October 4th, 2008 at 5:44 pm
Thanks for the script man ! I was annoyed to the core by this virus, but many thanks to you, I got rid of it !!
October 5th, 2008 at 7:52 pm
thanx for this great APPARATUS. THIS THING GOT RID OF MY VIRUS AND CLEARED EM OF MY WORRIES. ITS A GREAT THING AND NOW I CAN LIVE MY LIFE WITHOUT WORRYING ABOUT ME NOT BEING ABLE TO DO ANYTHING ON MY LAPTOP
October 6th, 2008 at 2:36 am
i am gonna show this to my friend, dude
October 7th, 2008 at 1:20 am
tvfjb rbvzxdki dkgtfpew vqmsifbu vsnzeip jpgacreh dyixernos
October 7th, 2008 at 1:20 am
dwgqb fovqieyls ensmwt vhepcd ynhz vqztsyfc oclmpf http://www.rfci.pyzwrdqe.com
October 7th, 2008 at 1:21 am
vnrhtfl jdtkqoup quwod nkymsveij lgvjdfh lnkwsz deqrut oqeaxdgmj lwxecjpni
October 7th, 2008 at 5:02 pm
order viagra online
October 9th, 2008 at 5:11 am
Thank you very much boss.
i used ur idea and got my solution. isnt it nice? chill!!!!!!!!!
I vl tell d same to all my frnds, yaar
bye
October 9th, 2008 at 12:09 pm
viagra
October 11th, 2008 at 12:49 am
generic cialis
October 12th, 2008 at 2:42 am
buy viagra
October 12th, 2008 at 2:43 am
generic viagra
October 13th, 2008 at 9:58 am
buy online ultram
October 15th, 2008 at 7:21 am
Thanks! Saved me time of doing it manually!
October 15th, 2008 at 8:36 am
Hi fried,
Thank you for the tool boss
Amazing job. It removed the virus completely. i was reinstalled my system twice due this worm. now i m got rid of…
Excellent job. i would like to take this oppurtunity to appreciate your timely help that you have rendered for many people..
October 23rd, 2008 at 4:23 pm
tdkwy5 hi webmastters
October 23rd, 2008 at 5:58 pm
Excelent posts and blog. I wish good luck from Private Krankenversicherung
October 28th, 2008 at 11:41 pm
That is a response. You dowload and run this program(ComboFix).
http://www.msproficient.com/2008/about-amvoexe-virus-how-to-clean-amvoexe/
October 30th, 2008 at 7:23 am
Hi webmaster!
October 30th, 2008 at 7:36 am
Hi webmaster!
October 30th, 2008 at 7:36 am
Hi webmaster!
November 5th, 2008 at 8:36 am
Excellent time. And nice site. Keep up a good work! :-))
November 6th, 2008 at 2:25 pm
Great script. It worked for me…
November 9th, 2008 at 2:14 pm
i used the script to clean the virus now i can access my flash disk. the problem i deleted ndetect, now my computer cannot start. what can i do?
November 10th, 2008 at 11:02 am
Very nice site!
cheap viagra
November 10th, 2008 at 11:02 am
Very nice site!
[url=http://training.cvc4.org/pharm1/14193/2.html]cheap cialis[/url]
November 10th, 2008 at 11:02 am
Very nice site!
[LINK http://training.cvc4.org/pharm1/14193/3.html]cheap tramadol[/LINK]
November 10th, 2008 at 11:02 am
Very nice site!
http://training.cvc4.org/pharm1/14193/4.html
November 10th, 2008 at 4:03 pm
zWoQbv hi mebmasters
November 13th, 2008 at 1:23 am
I’ll bookmark your site! :-)) Keep up a good work! :-))
November 16th, 2008 at 1:21 am
http://www.mylot.com/Buy_Cheap_Acomplia - acomplia aventis, 1722,
November 16th, 2008 at 3:53 am
Hello! http://www.mylot.com/Buy_Cheap_Propecia - anavar and propecia, 1981,
November 16th, 2008 at 6:18 am
Hello! http://www.mylot.com/Buy_Viagra_Online_Y - buy viagra online, 9979,
November 16th, 2008 at 8:43 am
Hello! http://www.mylot.com/Buy_Cialis_Online - generic cialis from india, 7551,
November 16th, 2008 at 11:18 am
Hello! http://www.mylot.com/Buy_Cheap_Xanax - xanax online, 7926,
November 17th, 2008 at 4:30 am
very cool script! (bookmarked the site already)
December 1st, 2008 at 10:07 am
Nice post u have here
Added to my RSS reader
December 1st, 2008 at 10:21 pm
Hi!veqe! http://nyqzltwc.com qhexd ptwog
December 1st, 2008 at 10:21 pm
Hi! hpoyj eufcx
December 2nd, 2008 at 5:45 am
Hi! xtnto gqiug
December 2nd, 2008 at 5:46 am
Hi! rstpw glclj
December 2nd, 2008 at 11:51 pm
Nice Site!
December 3rd, 2008 at 5:03 am
Nice Site!
December 3rd, 2008 at 7:13 pm
thank u 1000 times this works well.
December 6th, 2008 at 1:10 am
THANK YOU VERY VERY VERY MUCH KEEP UP THE GOODWORK…
December 8th, 2008 at 2:32 am
home business leads
December 8th, 2008 at 6:36 pm
OMFG………
This script is just awesome
man, you owe me!
December 10th, 2008 at 12:55 am
Add to my Bookmarks
December 11th, 2008 at 7:06 am
I was trying on this problem from a couple of days. But your script removed the virus so easily in a few seconds. Thank you very much
December 11th, 2008 at 7:27 am
Just now I read your profile. Very interesting.. The last lines really touched me and brought tears in my eyes.
The writing reflects your personality.. May God bless you always!!
December 12th, 2008 at 9:53 am
It is pretty! 8-)) Keep up a good work!
December 13th, 2008 at 12:05 am
save to my Bookmarks
December 15th, 2008 at 2:30 pm
merci ! ! !
simple et efficace.
bonne fetes de fin d’année.
December 17th, 2008 at 2:09 am
Super !!!
I can go to my bed now …
Thanks a lot !
January 16th, 2009 at 9:39 am
Nice script but exposes the boot files which can be accidentally deleted.How can I hide the boot files again?
February 11th, 2009 at 1:39 pm
This script has helped me time and time again. Thanks mate!
February 21st, 2009 at 2:35 am
THANK YOU SO MUCH….YOU MAKE MY CYBER LIFE MUCH EASIER.
February 27th, 2009 at 12:51 pm
worked like a charm thank you
March 15th, 2009 at 10:56 am
I wish good luck of success of health and love !
March 15th, 2009 at 12:04 pm
The main thing children heart to not grow old
March 17th, 2009 at 8:08 pm
all news here
April 4th, 2009 at 9:13 pm
Dude if I ever get rich and decide to give someone a million dollars just for the hell of it. Your at the top of the list.
April 27th, 2009 at 4:46 am
Oh, God. THANK YOU!
May 11th, 2009 at 9:54 pm
Excellent.I tried with so many solutions regarding this but i couldnt get the real solution for this pbm.I tried five times to reinstall my os in my machine.No result.But your script is helped me a lot.Thank you boy!
May 16th, 2009 at 1:50 am
thanQ
this has been driving me mad for months
now itz FIXED
PEACE!!!
May 19th, 2009 at 8:09 am
http://web.zone.ee/a…
May 26th, 2009 at 6:29 pm
http://web.zone.ee/f…
July 10th, 2009 at 12:11 pm
Personally I do not think they are that bad. Find the files you are looking for at pdf-explorer.com the most comprehensive source for free-to-try files downloads on the Web
July 15th, 2009 at 2:38 pm
Thank you very much really needed this.. dam school of mine they don’t clean up there systems
But just wanted to thank you
Cya
July 23rd, 2009 at 2:12 am
it really works!i try the script and its okay now…great job!thanks a lot!
September 3rd, 2009 at 6:34 am
Any Updates
September 21st, 2009 at 3:24 pm
Great script!! Thank you for writing it!!!
September 25th, 2009 at 5:53 pm
awesome script man…
it works easily and effectively..
thanks:)
October 22nd, 2009 at 9:28 pm
Hey dude,
just can’t thank u enough. You have saved me from losing my job. This freaking thing got on my work computer and I had no clue, until one day, i decided to view hidden files. Whenever i clicked Apply - OK after selecting show hidden files, this thing changed it back to “Do not show hidden files”. I immediately sensed something was wrong. I downloaded a copy of Avast and ran a thorough scan at boot. It did try to delete, but the problem was still there. So i went online and thanks to Polonus (http://forum.avast.com/index.php?topic=50008.0) who guided me on this.
Once again, Thank you so much !
October 29th, 2009 at 4:37 am
gdfgddgdgddgdfg
October 30th, 2009 at 6:00 am
Awesome…great job
December 7th, 2009 at 4:53 am
I was looking for such solution for a long time. I think it might help me.
January 5th, 2010 at 8:37 am
thank u so much for creating this script to remove virus. in my computer, i have 2 viruses, that is e9naq.exe and h0.exe . Whenever i run this, it finds and cleans this. but when i open Local Disk (C:), i see these viruses shown. i can’t clean these. Please help me.
January 15th, 2010 at 6:30 am
Ñîâðåìåííàÿ ÑÒÎ ýôôåêòèâíî è êà÷åñòâåííî âûïîëíÿåò ñâîè ôóíêöèè ïðè ïîìîùè ðàçëè÷íîãî âèäà îáîðóäîâàíèÿ…
àâòîðåìîíò…
January 19th, 2010 at 5:43 pm
taskkill is not working on my computer. What to do?
January 19th, 2010 at 7:01 pm
Øèðîêèé ñïåêòð ñîâðåìåííîãî øàõòíîãî è ãîðíîîáîãàòèòåëüíîãî îáîðóäîâàíèÿ íàñ÷èòûâàåò áîëåå 100 íàèìåíîâàíèé…
âèáðàòîðû, ãðîõîòû, æåëåçîîòäåëèòåëè…
January 25th, 2010 at 8:28 pm
àñôàëüòîóêëàä÷èêè, àâòîêðàíû, áóëüäîçåðû, ãðåéäåðû, êàòêè, ïîãðóç÷èêè, ýêñêàâàòîðû…
Ïîãðóç÷èêè èñïîëüçóþòñÿ äëÿ çàñûïêè, ðàñêîïêè, âûðàâíèâàíèè è äðóãèõ ðàáîò ñ ðàçëè÷íûìè ìàòåðèàëàìè…
January 25th, 2010 at 10:24 pm
Your script helped me clean all my usbs and hard drives of tha viirus. Now I am infected with another virus that also seems to work in th esame way. It creates four copies of itself which it naes after four folders on the disk/usb which it then marks as hidden. The icon looks like a folder and if you dont look carefully you run the program and thats it, all antivirus software seems to pass over it and I cant get rid of it. Can you help. Oh it also has its own recylcle bin so if you erase things the bin just fills up until there is no more room on the disk unless you reformat. Very annoyin.
Cab you help? Adamoshe
February 7th, 2010 at 5:12 pm
Êàê çàðàáîòàòü â èíòåðíåòå…
èíñòðóêöèè ïî çàðàáîòêó â ñåòè…