Re: Korgo-V

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 08/04/04


Date: Wed, 4 Aug 2004 06:59:11 -0400

Obtain McAfee's virus and worm removal tool, Stinger: http://vil.nai.com/vil/stinger/

1) If you are using WinME or WinXP, disable System Restore
            http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
2) Reboot your PC into Safe Mode
3) Using McAfee Stinger, perform a Full Scan of your platform and clean/delete any
            infectors found
4) Restart your PC and perform a "final" Full Scan of your platform
5) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
            System Restore preferences, (e.g. HD space to use suggested 200 ~ 400MB),
            reboot your PC.
6) If you are using WinME or WinXP, create a new Restore point
7) Please report back your results

Dave

"Polly_M" <anonymous@discussions.microsoft.com> wrote in message
news:c1b101c47a11$34f09030$a501280a@phx.gbl...
| I am running Windows XP and have recently had problems
| with Korgo-V; I have used NAV programmes to detect/delete
| this but still have problems with programmes running at
| computer shut down. I have downloaded the Korgo fix-it
| from Symantec separately and this says the virus is not
| present.
|
| However I am left with two unknown .exe files that arrived
| on my computer at the same time the problems started.
|
| These files are:
| Gnicbemp
| qblnjf
| and they are in the Windows System32 folder along with
| Kjocbkba.dll, all dated 03/08/2004.
|
| I have tried deleting and 'access is denied'
|
| I presume these are random files created by the virus?
|
| Any help, including how to get online help elsewhere,
| would be greatly appreciated!
|
| Thanks,
| pem
|



Relevant Pages

  • Re: PLEASE Help with a Virus Fix
    ... Obtain McAfee's virus and worm removal tool, ... If you are using WinME or WinXP, disable System Restore ...
    (microsoft.public.security.virus)
  • Re: My doom virus
    ... Obtain McAfee's virus and worm removal tool, ... If you are using WinME or WinXP, disable System Restore ...
    (microsoft.public.scripting.virus.discussion)
  • Re: Virus deletion
    ... If you are using WinME or WinXP, re-enable System Restore, reboot the PC ... | get a virus alert whenever I start the computer and then ...
    (microsoft.public.security.virus)
  • Re: W32.Beagle.M@mm
    ... Obtain McAfee's virus and worm removal tool, Stinger: http://vil.nai.com/vil/stinger/ ... If you are using WinME or WinXP, disable System Restore ...
    (microsoft.public.security.virus)
  • Re: VIRUS. Worm_netsky.b
    ... Obtain McAfee's virus and worm removal tool, ... If you are using WinME or WinXP, disable System Restore ...
    (microsoft.public.scripting.virus.discussion)

Loading