For the past few days, my laptop anti-virus has detected and removed the “Autorun-G” virus/trojan but that damn virus kept on re-appearing! This is what was reported by Avast! AV

Avast! Warning:
File Name: C:\autorun.inf
Malware-Name: INF:Autorun-G [Trj]
Malware-Type: Trojan Horse
VPS Version: 071205-0, 05-12-2007

So I googled on this and found out this virus is also known as Kavo or NTDELECT, as the kavo.exe will re-create files that will re-infect your pc. There are many people who got infected as well and can’t find an easy solultion.

Some tips that I found were quite long and required you to reboot into Safe Mode, delete some files and registry entries, which makes me pretty uncomfortable.

However, I found this site which has a link to a simple removal tool named “Kavo Killer” for Win2000 and WinXP. My PC is WinXP Pro so I tried it and it works! Yeay!

If your windoze computers are infected with this as well and your anti-virus can’t remove it, you can try this but do so at your OWN RISK, I will not be held responsible if the software caused any irreplaceable damage to your PC or data. Also, let me remind you that this tool is for systems running Windows 2000 and Windows XP ONLY.


The software is written in chinese btw. So I don’t know what it says, however you just need to click one button to make it work.

Ok if you still want to try, follow these steps.

  1. Disable “System Restore” on your System (Accessories > System Tools > System Restore)
  2. Click here to download this file
  3. Unzip and extract it anywhere
  4. Restart your PC in safe mode (for WinXP, before the WinXP screen comes in, press F8 repeatedly until you come to the start-up options)
  5. Locate the exe file and double-click on it
  6. Click on the top right-most button (the only button with an icon)
    ntdelect kavo autorun-g malware killer
  7. When finished. Reboot
  8. Just to be sure, set your anti-virus to scan at boot time and restart again to make sure the Kavo.exe is no more

That’s it. Let me know if this post has helped you.