?
Solved

How to remove W32.Korgo.W

Posted on 2004-08-10
10
Medium Priority
?
852 Views
Last Modified: 2010-04-12
Symantec unable to remore W32.Korgo.W. I support the laptops in the office and Sysmantec finds W32.Korgo.W on one of my users but is unable to remove it and just quarintines them. I ran Symantec from the safe mode and it has found more than 6000 files and just on the letter G's... If anyone can help I'd appreciate it very much.

DK
0
Comment
Question by:daniels48
  • 4
  • 2
  • 2
8 Comments
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 11765790
Hello daniels48 =)

Have u tried the Instructions here >> http://securityresponse.symantec.com/avcenter/venc/data/w32.korgo.w.html
0
 

Author Comment

by:daniels48
ID: 11771930
Thanks but that was what I tried and it ran over night finding 10,000 afected files and was only up to the files with the letter G and was never able todelete any of them but was able to Quaritine them and there were no entries in regedit. It never finishes. It's like the darn thing keep populating itself as to where you can't keep up..

Thanks
Dan
0
 
LVL 21

Accepted Solution

by:
jvuz earned 2000 total points
ID: 11771959
Do a check with Stinger:

http://vil.nai.com/vil/stinger/
0
2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 11771977
Its wierd =|

Can u Download HijackThis v1.98.2, run it, Save the LOG file and Post it here:
http://tools.radiosplace.com/HijackThis.exe

let's see what is really going on ur system :-?
0
 

Author Comment

by:daniels48
ID: 11785782
Jvuz,
      Thanks so much about stinger. It ran all night and was able to find and delete all the infected files it created which were well over 15,000. All cleaned and good to go. I want to also thank everyne for their suggestions also and you made me a hero.... Just for a day.. Ha!

DK
0
 
LVL 21

Expert Comment

by:jvuz
ID: 11807284
Is your problem solved? If so, please accept the answer that helped you most or if it were more then 1 answer, you can split the points.

Jvuz
0
 
LVL 21

Expert Comment

by:jvuz
ID: 12023941
Fine by me,

Jvuz
0
 
LVL 21

Expert Comment

by:jvuz
ID: 12051641
Thanx,

Jvuz
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question