Tips Cleaning Kspoold Virus

Virus Kspoold is a new virus which is very fast spread. This is due to the use of flash disk as a temporary storage file. With flash we will move a lot of files easily. Risk is the spread of the virus.

Often computer users open files without notice the type of file. Because this virus change from document file into the application . It seems this virus spread without having to click on a file that is exposed to the virus. This is my personal experience.

Flashdisk that clean from viruses, when plug to the USB port which infected by virus. So, all document file will change into the application. Whether .Doc or .Xls extensions.

But because the experience, that document file be open then stored with different extension. Such .doc format save as .Rtf and .Xls save as .Xml spreadsheet. But.Xml format only can be opened in office 2003.

If opened in the office before, which appears only html code only. But eventually I also find on the internet how to clean this virus. From one of the blog, i found the way to solve it.

1. Do not clean the virus using anti-virus first, because all the infected files will be deleted (delete).

2. The first step, we must kill the virus that is active then reconstruct the file that has changed to .exe into document file.

3. Check the document file on the computer, doc, xls, MDF, ldf, DBF). When all become application, its mean that the computer is infected.

4. Run the command prompt, with click start - run, type cmd - enter, type services.msc. See, are there service named Kprintspooler?

5. Open windows explorer, file kspoold.exe check whether there are in c: \ windows \ system32 \ (if there means positive virus infected).

5 point above shows the characteristics of virus infected computers kspoold. Now the process of cleaning the virus.

1. Shut down the virus process in windows service:

• disable your anti virus
• Run the command prompt, with click start - run, type cmd - enter,
• Type services.msc.
• Search service with the name kprintspooler, turn it off
• Double-click Kprintspooler , select stop,
• Then in start-up type select disable.

2.Delete Kspoold.exe files in c: \ windows \ system32 \
- If it can not be deleted, change the file extension, for example kspoold.exx, then remove.

3. Restart your computer.

4. Activate your antivirus, update its virus definitions.

Done, now let the anti virus work. Be careful with files that have been infected. Do not let your anti virus delete them. I already try Norton Anti virus, when the virus was detected, it remove immediately. Different with AVG that ask for confirmation first.