?
Solved

How to remove W32.Korgo.W

Posted on 2004-08-10
10
Medium Priority
?
850 Views
Last Modified: 2010-04-12
Symantec unable to remore W32.Korgo.W. I support the laptops in the office and Sysmantec finds W32.Korgo.W on one of my users but is unable to remove it and just quarintines them. I ran Symantec from the safe mode and it has found more than 6000 files and just on the letter G's... If anyone can help I'd appreciate it very much.

DK
0
Comment
Question by:daniels48
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
10 Comments
 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 11765790
Hello daniels48 =)

Have u tried the Instructions here >> http://securityresponse.symantec.com/avcenter/venc/data/w32.korgo.w.html
0
 

Author Comment

by:daniels48
ID: 11771930
Thanks but that was what I tried and it ran over night finding 10,000 afected files and was only up to the files with the letter G and was never able todelete any of them but was able to Quaritine them and there were no entries in regedit. It never finishes. It's like the darn thing keep populating itself as to where you can't keep up..

Thanks
Dan
0
 
LVL 21

Accepted Solution

by:
jvuz earned 2000 total points
ID: 11771959
Do a check with Stinger:

http://vil.nai.com/vil/stinger/
0
Bringing Advanced Authentication to the SMB Market

WatchGuard announces the acquisition of advanced authentication provider, Datablink, with one mission – to bring secure authentication to SMB, mid-market, and distributed enterprises with a cloud-based solution, ideal for resale via their established channel & MSSP community.

 
LVL 65

Expert Comment

by:SheharyaarSaahil
ID: 11771977
Its wierd =|

Can u Download HijackThis v1.98.2, run it, Save the LOG file and Post it here:
http://tools.radiosplace.com/HijackThis.exe

let's see what is really going on ur system :-?
0
 

Author Comment

by:daniels48
ID: 11785782
Jvuz,
      Thanks so much about stinger. It ran all night and was able to find and delete all the infected files it created which were well over 15,000. All cleaned and good to go. I want to also thank everyne for their suggestions also and you made me a hero.... Just for a day.. Ha!

DK
0
 
LVL 21

Expert Comment

by:jvuz
ID: 11807284
Is your problem solved? If so, please accept the answer that helped you most or if it were more then 1 answer, you can split the points.

Jvuz
0
 
LVL 21

Expert Comment

by:jvuz
ID: 12023941
Fine by me,

Jvuz
0
 
LVL 21

Expert Comment

by:jvuz
ID: 12051641
Thanx,

Jvuz
0

Featured Post

Ransomware Attacks Keeping You Up at Night?

Will your organization be ransomware's next victim?  The good news is that these attacks are predicable and therefore preventable. Learn more about how you can  stop a ransomware attacks before encryption takes place with our Ransomware Prevention Kit!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Envision that you are chipping away at another e-business site with a team of pundit developers and designers. Everything seems, by all accounts, to be going easily.
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…
Suggested Courses

741 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question