Search This Blog

Tuesday, May 27, 2008

Kavo

Went through the following to remove it.
Deleted the following from C:\
autorun.inf
qjatw9aj.exe
qped.com

Deleted from C:\Windows\System32,
kavo.exe
kavo0.dll
kavo1.dll
kavo2.dll

Removed from registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"kava" = "%System%\kavo.exe"

No comments: