Kavo virus makes Yahoo! Messenger itself 'ends'

1,256,000 computers in Vietnam have been infected with W32.Kavo (a virus from China) and variants of this virus in June 2008. This is the cause of the phenomenon that many people use Yahoo! Messenger in Vietnam has encountered in the past: Every time a user signs in (sign in) to Yahoo! Messenger, this software will automatically crash.

Up to 639 new variants of the W32.Kavo virus appeared in June 2008, averaging 21.3 variants per day, which is a new record of the speed of a virus.

Appeared on September 11, 2007, there have been 3,191 variants of W32.Kavo have been distributed online. Computers that are infected with this malicious code are not only hijacked, lost their personal information, cannot display the file with hidden properties, but are also unable to use the Yahoo! Messenger.

W32.Kavo virus uses the Hook Message technique to be loaded into the memory of all Graphical User Interface processes that are being executed on the computer.

In this way, Kavo can 'scour' in the memory of processes to detect user account passwords. However, due to a programming error, when Kavo interferes with the memory of Yahoo! Messenger, the virus code generates a memory exception, causing the entire process to crash.

How to kill W32.Kavo virus