Computer question --how to get rid of Kitro Worm

[cp1969]

Don't ask me how because I don't know, but the computer became infected with what Symantec calls:

W32.Kitro.A.Worm
W32.Kitro.D.Worm

I *think* this thing has caused a bunch of files to be generated in the Windows/Temp directory. Symantec says they're all quarrantined; not to worry. But why doesn't it delete them?

The funny thing is, if you try to delete them, you get a message that they cannot be deleted, but they then disappear.

Short of doing a Windows (XP Home is what I'm running) reinstall, is there anything that can be done? My system is getting awfully slow. Firefox used to open up in 4 or 5 seconds, now it may take a minute or more.

ps. Also, if you even look at these files in Explorer, it stirs up a bunch of Symantec virus action.

 

[Tig]

Nice description of kitro http://www.symantec.com/security_response/writeup.jsp?docid=2002-022214-5201-99&tabid=2

Most sites have similar instructions to what I found here.

As for the speed of your machine what you are using to combat spyware? My favourite weapons are Adaware by Lavasoft and Spybot serch and destroy. Together they seem to keep me out of trouble.

 

[Tig]

I meant to say..
Nice description of kitro can be found here

 

[Soundguy]

If you have a symantec product you can follow this advice:

W32.Kitro.A.Worm - Symantec.com

Soundguy

 

[cp1969]

I just spent the last 4 hours following the instructions on the Symantec page in that link.

It said to run a full virus scan then delete some values from a couple of different registries.

Unfortunately, there is no such value in the registries.

So I am at a loss.

 

[Tig]

Either it has been eliminated or possibly it could be a variant of the the Kitro that has a different registry entry.
Does it still show up when you scan in safe mode?

 

[cp1969]

I guess not. The whole scan was run while in safe mode. The virus scan only found one item and it had a title of Adware or something like that.

 

[anojones]

I hate to say it- but most the time it's just best to re-install, back up your data and start again. If you have one thing, you probably have others and you'll never really know if you got rid of everything. Norton won't pick up everything (rootkits, etc) and if your system is slowing down, it may be a lost cause. Some folks think you should be re-installing windows every year or so anyway.

 

[cp1969]

Well, that did it. Computer is now belly up. Am posting this from daughters laptop.
Got home last night and got message "a disk read error has occurred; press ctrl alt del to restart"
I was able to boot up into DOS via the Windows XP disk in the CD. I tried to do a repair...no luck. I tried to do a reinstall, now I can't even boot up via the CD.
I think it may be taking a trip to the river to be shot full of as many holes as I can put in it before it hits the water.

 

[MrJimi]

I am far from a PC guru but try and go to start menu then do a search on the name and just delete it as it pops up, that has worked for me in the past and restart your PC again a run same search again..It's worth a try
Best of luck
Jim