AgoBot-LG Worm Repair

The latest computer infection to hit the campus has been identified as an AGOBOT worm variation.

To repair and remove the worm from your system

• Download the following Sophos Resove file to your desktop
• agobtgui
  1. Run the Resolve file on the infected machine to remove any start up entries
  2. Reboot the machine - without the startup entries the worm will not be executed
  3. Run the Resolve again to remove the files from disk
• Make sure all of your Windows updates are current.
  Go to the Microsoft site to verify that you are current. Click on 'Scan for updates' and apply all critical updates and service packs.

For more information from Sophos on the removal and disinfection of computer worms:

http://www.sophos.com/support/disinfection/worms.html