Autorun-G Remover

The virus Autorun-G (Autorun-G[Trij]/Win32.NSAnti.r, kavo.exe, ntdelect.com) is propagated through partition and removable disk, the virus copies periodically two files "autorun.inf" and "ntdelect.com" in all the partition of your system, if you remove them, these two files will go back to their places a few seconds after his suppression.

The virus puts two files in all the partition of your system and in all removable disk:

• autorun.inf
• ntdelect.com

The ntdlect.com application launches out automatically with each time you try to open or explore a partition.

This puts too three files in your system repertory:

• <System>\kavo.exe
• <System>\kavo0.exe
• <System>\kavo0.dll
• <System>\kavo1.exe

And another two files in your temporary repertory:

• <Temp>\b88d9jce.sys
• <Temp>\zjtxwj.dl

Creates the registry enter:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
kava
<System>\kavo.exe

This virus runs automatically each time you open or explore a partition, it is preferable to download the patch and unpack it on the desktop, reboot your machine in Safe Mode and run the patch, always in safe mode.

Instruction on how to restart your computer in safe mode.