How To Remove the Autorun Virus
A virus is a computer bug that can replicate continuously in the host computer and when the virus infected computer is used for some task especially when using a USB or using the email, there is a chance that the virus will duplicate itself in to the USB and also through email into the mail recipient. Due to this, the other computer is infected by this virus. Some virus can also attach itself to files and can move from one computer to another through network.
There is a common virus that attacks the autorun.inf file, this file is a simple Windows text file that instructs the computer to detect and play CDs, DVDs and USBs automatically as you plug them in the computer. This virus can easily spread using USBs and can change the setting of the device. In some cases the virus blocks the internet access of the computer, especially to antivirus website. It can also disable the hidden files and folders. The autorun.inf virus gets in to the registry of the system and launches itself automatically, when the computer starts. The autorun virus is also known for automatically installing the key logger which steals the computer user’s usernames, passwords, credit card information etc.
This virus puts the computer system at great risk and can result in leakage of vital personal information of the user and therefore the virus requires being removed as soon as possible. This virus can be removed manually as well as by using virus removal tool. In manual removal you have to launch the Task Manager and start the computer in safe mode. Then on the command prompt list all the hidden system and exe files. Then you can disable all the system and read only files for autorun.inf and ntdelect.com and also you have to remove both these files.
In the next step you have to follow these steps for all the drives on the computer. Then you have to search for the kavo.exe in C:\windoes\system32\ and delete it. Then open the registry and delete all files under HKEY_LOCAL_MACHINE\SOFTWARE and HKEY_CURRENT_USER\SOFTWARE.
September 5, 2011 