A while back I decided to format my computer since I had so much junk on it and was having many problems. One of the main reasons was I did not have a virus protection program. I figured I would format it, then install the anti-virus program I just bought. After formating the computer I set up everything (my internet/updating windows/downloading virus definitions). Then I ran the virus scan and I have several virus', one of which was W32.Korgo.V. After messing and looking for answers the virus got worse and worse and many other virus' appeared so I formated again. The same thing kept happening. Recently I bought a new hardrive and decided I would just take the older one out and put the new one in. So I did that, installed windows to the new drive, and again the same problems arised. Originally I thought the virus' were staying on the drive...but this is a brand new drive. Anyone have any answers?

probablly saves itself to the ram.

Is that possible?

How can I get rid of that?

I dont know much about computers but you said in the ram, could I just get a new ram chip?

well whats in the ram when you shut the comp off stays in there until you restart. might be you just need to get it wiped off. a computer shop anywhere near you will help and tell you how to get rid of it. i know alot but not all about computers. ram can get expensive.

If you are connecting to the Internet without some type of firewall it can take only seconds to become infected with a worm or virus. Once you reformat the drive and reinstall Windows install a firewall before you connect to the Internet.

interesting...but I can't imagin how it would get onto the ram..

but, was talking to some guy at another site and he was saying the most probable cause would be infected cd's that I owned to install software after formatting. I'm trying to run scans on all my cd's to check if that works first. I actually hope that I do find something on a cd would be so much easier to just format and not use that cd next time. I'll look into what you said though, thanks for the info.

If you are connecting to the Internet without some type of firewall it can take only seconds to become infected with a worm or virus. Once you reformat the drive and reinstall Windows install a firewall before you connect to the Internet.

ok thanks Hankster. But wouldn't Windows XP built in firewall protect well enough for that? Also why would I be getting virus' only after I format my computer not any other time. By the way i'm use the internet connection Peoplepc, and i'm only visiting trusted sites, like windowsupdate.com.

Also, in msconfig under services it says that my firewall is stopped, shouldn't it say running at all times?

no under any factor the windows firewall won't be as affective as a real!!!!!!!!!!!!! firewall like norton,etc. they can get in basically if your connected. doesn't matter if you trust the site the site in order to not get you infected from that site must be safe like microsoft's site. oh and the ram, easy to get into.

ok, well then after I run this system scan with like 8 different programs that wildersecurity forum advised getting, I will check out the ram if all this doesn't work. Should I just buy a new ram stick or should I take it to someone to get fixed. I don't really mind spending 100-150 to get a new stick if it would make my computer new again. If you advise getting the one I have checked out what type of places can fix it? Will stores like Best Buy be able to?

Also just so you know microsoft's site is the only site I used after formatting. I use that to update windows. So that is a trusted site.

It is NOT your RAM. When you turn off your computer any information in your RAM is lost.

XP SP2's firewall should stop most worms. If you are not using SP2 then there are a number of vulnerbilaties where you can get infected. You don't have to visit any sites to get infected with a worm. Worms constantly scan the internet for open computers and infect them if they find one. The user has to do no more then be connected to the Internet.

If the CDs you are using are "homemade" or you got them from someone else, then yes they could be carrying a virus. But you said you were infected with the W32.Korgo.V worm and that is one you normally catch from the Internet. More info about it is at http://securityresponse.symantec.com/avcenter/venc/data/w32.korgo.v.html <--- Read the whole page

yep the cds can contain a virus, maybe when you made em it quickly copied itself on there.

oh and i've seen one get in the ram and stay. i've done forgotten what it's name was but of course that was on my old computer running win98. i pressed ctrl,alt,del and got the menu and found the name and got it and removed it. basically it was a worm that slowed it down. but i would try the cd's they might have the virus.

yep the cds can contain a virus, maybe when you made em it quickly copied itself on there.

I'm only using licensed software, I did not make any of the cd's.

But just to be on the safe side I scanned all the software cd's I use even windows XP. Everything was Clean.

It is NOT your RAM. When you turn off your computer any information in your RAM is lost.

XP SP2's firewall should stop most worms. If you are not using SP2 then there are a number of vulnerbilaties where you can get infected. You don't have to visit any sites to get infected with a worm. Worms constantly scan the internet for open computers and infect them if they find one. The user has to do no more then be connected to the Internet.

If the CDs you are using are "homemade" or you got them from someone else, then yes they could be carrying a virus. But you said you were infected with the W32.Korgo.V worm and that is one you normally catch from the Internet. More info about it is at http://securityresponse.symantec.com/avcenter/venc/data/w32.korgo.v.html <--- Read the whole page

Then maybe this is my problem. For some reason my firewall say's Stopped when I view it from msconfig. (edited) I searched in google for enabling the firewall. I will do that asap

So far here's what I have yet to finish or try.

-Cleaning process from http://www.wilderssecurity.com/
http://www.wilderssecurity.com/showthread.php?t=50662

-Activate my firewall and see if that helps, elsewise buy a new firewall program...zonealarm I hear is nice, any other suggestions?


If I reformat my again. If need be, I will make sure to enable the firewall.

Yes, make sure XPs firewall is activated and use Zone Alarm. Download and burn ZA onto a CD if you have to and then format the HD, reinstall XP and then install ZA before you connect to the Internet.

All right, however I'm still skeptical for some reason. What if the virus' continue to appear?

So after my format I immediately enable a firewall. I am downloading free zone alarm for the fire wall. Is the free version good enough, or should I actually purchase it?

The free version is fine. Be sure to reformat the drive before you reinstall XP. Do you have Norton or some other virus protection? Install that too.

Yes I have norton. I finished formatting, installing the modem and setting the XP firewall to monitor that. Then I installed Zonealarm which I dled from a friends computer. Finally, I installed Norton Systemworks. None of the programs are updated considering I have yet to access the internet but I ran scans on many programs, and I found no virus' or problems. Everything seems to be going quite well. So in reality the virus' did not find some way to stick to the drive somehow, I was just allowing them to come back everytime I connected to the internet. I find that so strange, considering I didn't realize they could continuos make their way onto my computer that easy. No longer am I skeptical ,though. As soon as I finish updating all my programs and put the finishing touches I will give you one last review. Thank you very much for the help. :)

Of course you were right, firewall was the major issue. I suppose XP's firewall wasn't working correctly or monitoring that modem. I have zone alarm working though. Here's the scary thing..I've had my computer set up for less than a day I connected to the internet to start updating programs again and zone alarm caught almost 200 entrusions, 10 of which are high rated. I had no idea so many would come towards my computer just by accessing the internet. Everything is working great now though thanks to you. Thanks again for the help.