Saturday, March 6, 2010

WIN32 NSANTI VIRUS REMOVER

(AMVO.EXE / AUTO RUN.INF) VIRUS

EFFECTS OF WIN32 NSANTI VIRUS

Recently we received a mail from one of our readers whose computer was infected by Win32/NSAnti virus, this virus mainly causes drive opening problem by double click in Windows XP.

If your system is infected by this virus you can’t see hidden files and folders , even after applying the settings to show hidden folders. This setting is reverted back to Don’t show hidden files and folders by the virus.

This happens because virus protects the two hidden, system files called d.com and autorun.inf which are created by amvo.exe and amvo0.dll , amvo1.dll which resides in system32 folder on the OS drive (hard disk partition on which windows operating system is installed).


HOW TO REMOVE WIN32 NSANTI VIRUS

In order to fix the problems caused by this virus ,you will need to delete all these files created by the virus.

Follow the set of commands to delete these files

Open Start>>Run and type cmd and press enter. This will open windows command prompt window. On this window, type as directed in steps further and press enter at the end of each step.
type cd\
type cd windows\system32
type attrib -r -h -s amvo.exe
type del amvo.exe
type attrib -r -h -s avmo0.dll ,repeat the steps 5 and 6 again to delete avmo1.dll
now type d: and press enter for d: drive partition.
type attrib -r -h -s autorun.inf
type del autorun.inf
type attrib -r -h -s d.com
type del d.com
Similarly repeat from steps 8 to 11 for all your hard disk partitions to remove the files created by the virus.

Note: Above procedure may seems cumbersome but proves to be of great help to repair your system, if none of your anti-virus tools is able to solve the problem and remove the infections caused by the virus.

No comments:

Post a Comment