Win32:Kavos

Win32:Kavos is a stealing trojan horse

Description:

Win32:Kavos is a trojan horse intended to steal on-line game passwords etc. It comes along with the rootkit klif.sys (notice the similarity to the name used by the Kaspersky driver). Once infected, Kavos drops itself into the root folder of all drives (under randomly generated names) and adds an autorun.inf to ensure the loading of the malicious files. It simultaneously creates some libraries in the \system32 folder with names such as kavo0.dll, amvo0.dll etc. Older variants of this malware are detected as Win32:Oliga, Win32:Monga and Win32:Gamona

Detection/Removal

Update your VPS to the latest version and schedule a boot-time scan. Move all related files to the virus chest.