help with amvo.exe too

Viruses and worms
1

My computer is infected with amvo.exe and avast detects it whenever the pc boots up or whenever I open either of my hard drives.

Now, avast seems to be incapable of eradicating the virus.

So I tried using SuperAntiSpyware and scanned my PC. It detected some spyware but not the amvo.exe nor the other files that is connected to the virus like amvo0.dll or the 2ifetri.cmd that resides in both of my C: and D: drives. I deleted the detected entities and booted up to normal mode as I did the scan in safe mode. To my surprise, avast does not seem to detect the amvo virus anymore when I booted up into normal mode even if I can still see the amvo.exe file in my window’s system32 folder and the 2ifteri.cmd that resides in the directory of my C: and D: hdds. I am reluctant to delete them myself as I tried deleting the 2ifetri.cmd manually before which resulted with my C: and D: drive being unable to be explored.

So can any of the experts here take a look at my hijackthis log?

2

How many usb devices do you have?

What are the drive letters usually assigned to them?

How many can be plugged ib at a time?

Click this link and download to your desktop this program

querymountpoints.

http://cid-32d8666f4048075b.skydrive.live.com/browse.aspx/Malware%20files

This will show us not only all the mountpoints, but also all autoruns and their contents.

Download and Install Microsoft’s TweakUI: http://www.microsoft.com/windowsxp/downloads/powertoys/xppowertoys.mspx

Obtain and install TweakUI (right hand panel, 147kb in size), and then start TweakUI.

Expand the My Computer branch, then the AutoPlay branch, and then select Drives.

Turn off the checkbox next to every drive letter to disable AutoPlay – except your CD/DVD drive letters

This will prevent autoruns from running on your computer.

Download this program, Flash Drive Disinfector by sUBs from

http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe

Plug in your usb device.

Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
Wait until it has finished scanning and then exit the program.
Reboot your computer when done.

This utility will do a couple of things. First it will remove any autorun.inf it finds. There shouldn’t be one on a fixed HD anyway. There is no need for such a file on any removable storage device – iPod, USB flash drive, cell phone, .etc as you can open these drives manually.

It will create a SYSTEM protected, read-only, and perfectly harmless Autorun.inf file on any hard drive or removable storage device it finds when run. This file will not only help prevent future autorun infections, it will disable any current Autorun infection its ability to restart.

You can do this with all of your usb devices.

Please download Deckard’s System Scanner (DSS) and save it to your Desktop.
[*]Close all other windows before proceeding.
[*]Double-click on dss.exe and follow the prompts.
[*]When it has finished, dss will open two Notepads main.txt and extra.txt – please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

.
Post the logs form the above scan and the querymounypoints results.