Dismiss Notice
You are browsing this site as a guest. It takes 2 minutes to CREATE AN ACCOUNT and less than 1 minute to LOGIN

amvo0.dll Removal Instructions

Discussion in 'Tech, Gadgets & Science Forum' started by Invisible, Jan 15, 2008.

  1. Invisible

    Invisible Admin Staff Member

    #1
    Jan 15, 2008
    Joined: Feb 11, 2006
    Messages: 9,095
    Likes Received: 140
    Trophy Points: 160
    The filename amvo0.dll was first seen on Dec 8 2007 in SPAIN. It has also been seen in the following geographical regions:

    - MEXICO on Jan 7 2008
    - The EUROPEAN UNION on Jan 5 2008
    - THAILAND on Jan 15 2008
    - PORTUGAL on Dec 11 2007

    The filename amvo0.dll refers to many versions of a dynamic link library.

    The most common file size is 45,421 bytes. But the following file sizes have also been seen:

    - 54,784 bytes
    - 45,507 bytes

    The filename is associated with the malware group Trojan.Legmir.A.

    These files have no vendor, product or version information specified in the file header.

    amvo0.dll has been seen to perform the following behavior(s):

    • The Process is packed and/or encrypted using a software packing process
    • The Process is polymorphic and can change its structure
    amvo0.dll has been the subject of the following behavior(s):
    • Created as a process on disk
    • Registered as a Dynamic Link Library File
    • The process is hooked into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
    • Deleted as a process from disk
    amvo0.dll can also use the following file names:
    • AMVO1.DLL
    • 49096256.SVD
    • A0201802.DLL
    • 65828818.DLL
    • 29897739.DLL
    • AMVO2.DLL
    • 30191033.DLL
    • 36462834.SVD
    • 69778788.DLL
    • 65087893.DTA
    • 08186043.DTA
    • 48727952.DTA
    • AMVO0.DLL.BACK
    • AMVO0.DLLBAD
    • AMVO1.DLLBAD
    • 91653902.SVD
    • 39757859.SVD
    • 54900614.DLL
    • 48789353.DLL
    • 55495567.DLL
    • 80547817.DTA
    • 05833389.SVD
    You will find this trojan under: C:\WINDOWS\system32\amvo0.dll

    How to Remove it?

    Follow next posts for removal instructions...
     
  2. Msanii

    Msanii JF-Expert Member

    #2
    Jan 15, 2008
    Joined: Jul 4, 2007
    Messages: 6,223
    Likes Received: 62
    Trophy Points: 145
    mkuu nasubiri kwa hamu hizo nexts....

    pia naomba kuuliza kuwa robot maana yake ni kuwa siyo mtu au ndo jinsialess?? nina dukuduku la kitambo sana

    ila nakukubali na kuheshimu maamuzi yako
     
  3. Picassa243

    Picassa243 Member

    #3
    Jan 17, 2008
    Joined: Oct 10, 2007
    Messages: 23
    Likes Received: 0
    Trophy Points: 0
Loading...