Padobot.w or Korgo removal!

[jancz3rt]

Hey everyone. My friend has this backdoor on his PC and no matter what is done, it cannot be deleted. Even the tools by Symantec etc. fail to even identify the backdoor. the antivirus reports it but cannot delete it! PLEASE HELP!

JAN

 

[ZER0X]

Whats the name of the filename that has the infected virus???

 

[Lorand]

I once read somewhere that you can clean certain viruses if you set the computer's date to a day before the attack and then running the removal tool.
Worth a try...

 

[jancz3rt]

Here this is the bit!

ftpupdt.exe or something. Sorry I am not sure entirely but this is the link that gives some more deatail about the backdoor. http://www.viruslist.com/en/viruslist.html?id=1787609. My friend is eager to get rid of it but as I have mentioned, removal tools for this padobot failed! I dunno why. One thing, I read that the ftpupdt.exe launches the virus and gets deleted subsequently...disallowing the removal of it. Note that that happens on every startup.

 

[Lorand]

Try these steps to manually remove that virus: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?Vname=BKDR_BERBEW.F