Korgo.R worm! won't go away!

[Johannes Enstad]

I had problems with system restore and support/help functions not
functioning (WinXP), and I now figured out it must be because of the Korgo.R
worm, my virus detecter found it but couldnt remove it, so I went to
Symantec's site and downloaded a "removal tool"
(http://securityresponse.symantec.com/avcenter/venc/data/w32.korgo.removal.t
ool.html ).

Guess what! It doesn't work! Not for me, anyhow. I run the program, it scans
through all my files and it says there is no Korgo.R worm. But I know it is,
cause help/support/system restore still don't work, and my virus detectors
say it's there.

What to do now?

 

[Kaylene aka Taurarian]

How antivirus software and System Restore work together
http://support.microsoft.com/default.aspx?scid=kb;en-us;831829

 

[nancy]

I am sorry you are fustrated let me see if I can be of
help. The only thing I can suggest was what I did for
W32/worm.blaster. If you have not downloaded this you
should -
http://securityresponse.symantec.com/avcenter/FixBlast.exe
After that Shut down. Go in the back of the CPU and
disconnect the modem and phone connection as well as the
phone line from the wall. Ok. Now, start up the
computer. Go to Programs, Run, type in Services.msc
click OK. Go to Remote Procedure Call (RPC) click
recovery tab and for all dropdowns take no action, click
OK. Then click the X in the upper right hand corner.
When you run the Virus Cleaning Tool you have to Disable
System Restore. Start, My Computer Properties System
Restore Turn Off System Restore. Make sure you turn on
when you are finished. Gives this a try. >-----
Original Message-----