How to kill W32.Kavo virus
Virus Win32: Kavos Virus Kavo makes Yahoo! Messenger itself 'ends' , TipsMake.com has learned and provided a way to help readers if infected with this virus can "catch" and delete it manually or use anti-virus software support.
How to kill Kavo virus with ClamWin Free Antivirus software
Download ClamWin Free Antivirus and install it on your computer, go to the Select Components screen, if you don't want to integrate the software into Outlook and Widows Explorer, you can uncheck it, then click Next.
After installing, click on the software icon on the desktop to open, you will be prompted to download the latest virus data when entering the main interface of the software.
You press Shift and select all available drives and press Scan.
The software will conduct computer scans, detect and remove Kado viruses, as well as other malware on the computer.
How to delete the Kavo virus manually
1. Run Task Manager
Right-click on the Taskbar at the bottom right of the screen, select Task Manager, and you will see the Task Manager window appear
How to kill W32.Kavo virus Picture 1
Figure 1: Running Task Manager
Turn off WScript.exe & Explorer.exe if these two programs are running
How to kill W32.Kavo virus Picture 2
Figure 2: Close wscript.exe
How to kill W32.Kavo virus Picture 3
Figure 3: Close explorer.exe
2. Remove the Autorun.inf files
The feature of this Kavo is to generate Autorun files located in the root directory of hard drives. These files make the virus active when the victim double clicks the hard drive. To avoid re-activating the virus, one of the first things you have to do is remove the Autorun files in the root directory of the drives (on my machine are C, D, E drives).
In the Task Manager window, select File > New Task (Run .)
How to kill W32.Kavo virus Picture 4
Figure 4: Opening the run dialog to execute a program
The screen will display the Run command, type cmd to open the console screen, execute DOS commands
How to kill W32.Kavo virus Picture 5
Figure 5: Running CMD command
In the console, in turn, execute the following commands:
How to kill W32.Kavo virus Picture 6
Figure 6: Consonle screen to execute the command line
DEL c: autorun. * / F / a / s / q
DEL d: autorun. * / F / a / s / q
DEL e: autorun. * / F / a / s / q
3. Remove the virus
In the console window, type the following commands:
CD c: windowssystem32
DIR / a avp *. *
You will see the files avpo.exe or avpo0.dll
Keep typing
ATTRIB -r -s -h avpo.exe
DEL avpo.exe
or
ATTRIB -r -s -h avpo0.dll
DEL avp0.dll
Keep typing
DIR / a kavo *. *
If appears 1 or the files kavo.exe and kavo0.dll or kavo1.dll
Perform deletion commands
ATTRIB -r -s -h kavo.exe
DEL kavo.exeATTRIB -r -s -h kavo.dll
DEL kavo.dllATTRIB -r -s -h kavo1.dll
DEL kavo1.dll
Continue typing in the console
CD
ATTRIB -r -s -h ntde1ect.com
DEL ntde1ect.com
4. Edit Regedit
In the Task Manager window, select File > New Task (Run .) (Figure 4)
Display the Run box, type regedit
How to kill W32.Kavo virus Picture 7
Figure 7: Executing the program Regedit
How to kill W32.Kavo virus Picture 8
Figure 8: Window regedit
How to kill W32.Kavo virus Picture 9
Figure 9: Delete avpo.exe
Go to HKEY_CURRENT_USER> SOFTWARE> Microsoft> Windows> CurrentVersion> Run
In the left pane of Regedit window, if there is a stream of avpo.exe , right-click and delete the text.
At the end of the process, restart the computer.
Go back to windows, if you don't see any hidden files (due to viruses) you can download the following Windows Registry file and run it https://quantrimang.com/data/fixHiddenFiles.reg
Go to Statup by going to Run > type msconfig
How to kill W32.Kavo virus Picture 10
Figure 10: Run MsConfig
How to kill W32.Kavo virus Picture 11
Figure 11: Uncheck Kavo, or Avpo
Restart your computer again.
You should read it
- Kavo virus makes Yahoo! Messenger itself 'ends'
- The images are only in the memory of Yahoo Messenger
- Goodbye Yahoo! Messenger, a time to remember!
- How to use the new Yahoo Messenger version does not install the software
- Yahoo chat software will remove many features on December 14
- Viruses spread through Yahoo! Messenger re-exported
- New worms appear to attack both Yahoo! Messenger, Skype
- Yahoo Messenger for iPad is available in iTunes Store of iTunes
- Learn more about Yahoo Messenger
- Discover the new version of Yahoo Messenger on the web
- Emerging new attack worms via Yahoo! Messenger
- Yahoo has returned to Yahoo Together chat application, invited to experience