Published Jan 18, 2005 | Updated Aug 15, 2011


Severe |Detected with Windows Defender Antivirus

Aliases: WORM_KORGO (Trend Micro) Win32.Korgo (CA) W32/Korgo.worm (McAfee) W32.Korgo (Symantec)


Win32/Korgo is a family of worms that spread by exploiting vulnerabilities in certain versions of Microsoft Windows that do not have Microsoft Security Bulletin MS04-011 installed. Some variants of this worm open a backdoor component to gain unauthorized access to other computers.

To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:

For more information on antivirus software, see

Follow us