Expert: Lorry - 3/1/2009

Question
I receive this pop-up whenever I start Windows (XP Professional Service Pack 2):

kavo.exe - Application Error
The instruction at "0x10014090" referenced memory at "0x01127ee6". The memory could not be "read".

Additionally, I get a window asking if I want to "Work Offline" or "Try Again".

My antivirus (Symantec) can't detect anything.

Answer
Hi John,

Even though you have Norton installed, using Internet Explorer, go to:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Click the GO button, then under Virus Detection, click Start. You might be told that you need to download and install ActiveX Controls for the scan to work, answer Yes.

Write down exactly anything it finds, then go to: http://www.symantec.com/search/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

Am fairly certain that the scan will find W32.Gammima.AG, the following site gives you directions on how to remove.

http://www.symantec.com/security_response/writeup.jsp?docid=2007-082706-1742-99&...

No matter which AV program you use, make sure you keep it up to date and equally important is to run a viru scan once a week.

Hope this helps!
Lorry