http://07met.t35.com/vcc.gif

Saturday, November 7, 2009

Removing of kavo, tavo and ckvo virus

In this procedure, Go to "start" then click run type "msconfig" then go to "Startup" tab, then uncheck the startup item kavo, tavo and ckvo if there is any. this will disable the virus to regenerate autorun files, now click "apply" then "ok" and then "restart" button. After your pc is done restarting click "start" then "run" type cmd or command
Type the following:
cd\
dir /ah (this means display all hidden object because most viruses are hidden)
attrib *.* -r -h -s (this will change the attributes of the files. -r means read only -h means unhide)
now delete all files with and extension ".cmd" and ".inf"
delete also all ".com" files but donot include "NTDETECT.com"
delete also all ".bat" files. donot include "autoexec.bat"
and delete all ".exe" files if any hidden exe files where found
now from the root directory or "c:\" type "cd windows\system32"
type dir /ah to show all hidden files because tavo, kavo and ckvo are always hidden
now if you found any kavo, tavo or ckvo file delete it by typing
del kav* (delete all kav-whatever follows the kav word)
del tav*
del ckv*
now go to drive "d:" or whatever drive you have there.
then you follow the frist procedure like what we do in drive c:
its easy removing this virus than bar311 isnt it?
this virus can slow internet connection or even cannot access the internet and disable detection of flashdrives or any removable drive.
or copy this codes and name it as "delkavo.bat"
c:
cd\
attrib *.* -r -h -s
del *.cmd
del *.inf
(delete suspecious .com and .bat files)
cd\windows\system32
Attrib kav*.* -r -h -s
attrib tav*.* -r -h -s
attrib ckv*.* -r -h -s
del *.inf
del kav*
del tav*
del ckv*
d:
attrib *.* -r -h -s
del *.com
del *.cmd
del *.inf
del *.bat
pause
So in this way this can be removed manually.

No comments:

Post a Comment