OOOOOOPS -- page isnt ready yet

please visit current pages -- Latest News, Instant Messaging and Bugs 'n stuff that has the news archive for now :0)
back to the menu !

Removing the Gokar worm

Thes directions are from trendMicro. They involve editing the system registry and are for experienced advanced users. Most curent anti-virus patterns will remove this too try that first. Incorrect registry editing can cause system failure-- use with caution!

To manually clean infected systems, delete the %Windows%\KAREN.EXE file. %Windows% is variable. It is the directory where your Windows folder is located. This is usually at C:\Windows so that the file to be deleted is found at C:\Windows\KAREN.EXE.
Click Start>Run, type Regedit then hit the Enter key: HKEY_LOCAL_MACHINE>Software>Microsoft >Windows>CurrentVersion>Run>Karen Look for the following and delete it: C:\MIRC\SCRIPT.INI
Close the Registry.
Restore the file C:\INETPUB\WWWROOT\DEFAULT.HTM from backup.
Delete the file C:\INETPUB\WWWROOT\REDESI.HTM.
Delete the file C:\INETPUB\WWWROOT\WEB.EXE.

trendMicro