Symantec Security Response has developed a removal tool to clean the infections of the following variants of the Korgo worm:
W32.Korgo.F
W32.Korgo.H
W32.Korgo.I
W32.Korgo.L
W32.Korgo.P
W32.Korgo.R
W32.Korgo.S
W32.Korgo.T
W32.Korgo.U
W32.Korgo.V
The W32.Korgo Removal Tool does the following:
- Terminates the W32.Korgo viral processes.
- Deletes the W32.Korgo files.
- Deletes the registry values that the worm adds.