2007-10-24 23:06:32 · 4 answers · asked by bechau 1 in Computers & Internet ➔ Security
http://www.greatis.com/appdata/d/k/kavo.exe_Removal.htm
2007-10-24 23:10:45 · answer #1 · answered by ? 3 · 1⤊ 0⤋
SOLUTION:
To remove kavo.exe (aka ntdelect.com, TROJ_NSPM.ADB, and TROJ_NSPM.ABT)
Please perform the following:
1. Go to Trend Micro- http://housecall.trendmicro.com/...
and use their housecall scan/removal
2. Go to Registry Edit aka regedit and
search for
"C:\WINDOWS\system32\kavo.exe"
with the value of kavo
Please note the location of the kavo may vary depending on the type of variant you have. The general information insist that it is in
HKEY_CURRENT_USER\Software\Microsoft\W... = “%System%\kavo.exe”
I am working on removing all left over "residule" from the virus. As of right now McAfee wasn't able to detect this virus (i.e. kavo0.dll, kavo.exe in any of my drives)
2007-10-25 06:13:34 · answer #2 · answered by N R Mohanraj 4 · 0⤊ 0⤋
Follow the steps given in http://www.symantec.com/security_response/writeup.jsp?docid=2007-082706-1742-99&tabid=3
2007-10-25 06:11:30 · answer #3 · answered by Aravindhan Rathakrishnan 2 · 0⤊ 0⤋
http://www.greatis.com/appdata/d/k/kavo.exe.htm
2007-10-25 06:13:07 · answer #4 · answered by tasty 7 · 0⤊ 0⤋