How to Remove AutoRun Viruses From Vista

AutoPlay, a feature of Autorun, automatically reads the content of a USB drive upon inserting the removable media into the USB slot. Windows Vista will then, by default, launch any audio, video or setup files contained on the USB drive. Viruses and other malware exploit Autorun and AutoPlay to spread viruses contained on the USB drive and infect the hard drive of any computer that accesses the removable media's contents. However, you can use Command Prompt to manually remove Autorun viruses from Windows Vista.


Instructions

1. Log in to Windows as an administrator. Click "Start." Type "cmd" into the search prompt. Right-click "cmd.exe" from the results. 
2. Click "Run as administrator." Click "Continue" or enter your password into the security pop-up to proceed.
3. Type "attrib -s -h -r c:\autorun.inf" and "attrib -s -h -r c:\ntdelect.com" into Command Prompt, pressing "Enter" after each.
4. Type "del c:\autorun.inf" and "del c:\ntdelect.com" into Command Prompt, pressing "Enter" after each line.
5. Type "attrib -s -h -r c:\windows\system32\kavo.exe" into Command Prompt. Press "Enter," then type "del c:\windows\system32\kavo.exe." Press "Enter" to delete "kavo.exe."
6. Type "Exit." Press "Enter." Click "Start." Type "regedit" into the search prompt. Right-click the result "regedit.exe." Click "Run as administrator."
7. Enter your password if necessary, or click "Continue." Navigate through "HKEY_LOCAL_MACHINE," "SOFTWARE," "Microsoft," "Windows" and "Current Version."
8. Click "Run." Select any in
9. Navigate through "HKEY_CURRENT_USER," "SOFTWARE," "Microsoft," "Windows" and "Current Version." Click "Run."
10. Select any instances of "kavo" or "kavo.exe." Press the "Del" key. Click "Yes." Restart your computer.

Tips & Warnings


Scan and remove any viruses from your USB drives before attempting to manually remove Autorun viruses in Vista.

After removing any traces of these viruses from your system, run your computer in Safe Mode and launch your antivirus software to search for any remaining Autorun malware that may be infecting your computer.