to clean this virus, first of all, clean the register kill, use regedit.exe and find
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
clean the kavo.exe or taso.exe, and reset the windows hidden file value to 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Explorer\Advanced\Folder\Hidden\SHOWALLCheckedValue
change the value from 0 to 1, start task manager, kill explorer.exe and run explorer.exe again. ( for showing hidden files.)
to root directory of all your disks, delete autorun.inf and ntdelect.com.
to system_device:/windows/system32/, delete kavo*.* and taso*.*.
then restart windows.
沒有留言:
張貼留言