How to remove xmnm2.cmd

xmnm2.cmd , amvo.exe

Files size 114,611 bytes

MD5: 2AF89CD07ED12C9CE68AAB3B05382970

SHA-1: 8940C4408FC39B242518C2B656ECCDD9BDFA59DB

===============================================

Files created

C:\WINDOWS\system32\amvo.exe

C:\WINDOWS\system32\amvo0.dll

C:\Documents and Settings\Administrator\Local Settings\Temp\yv.dll

X:\xmnm2.cmd

X:\autorun.inf

(X:\ = C:\ - Z:\)

Registry Modifications

Value Added

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\

amva = "%System%\amvo.exe"

Values modified

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\

Advanced\Folder\Hidden\SHOWALL\CheckedValue: 0x00000000

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\

Advanced\Hidden: 0x00000002

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\

Advanced\ShowSuperHidden: 0x00000000

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

NoDriveTypeAutoRun: 0x00000091

URL to be downloaded/data identified

http://www.gdgft76.com/fm4/help.rar %Temp%\help.rar

=======================================================

วิธีกำจัด/แก้ virus : xmnm2.cmd , amvo.exe

=======================================================

Download Fix Tool : PeeTechFix-Win32/PSW.OnlineGame 2.0.5