http://www.symantec.com/security_response/...-071111-0646-99Cliffnotes:
1) Turn off System Restore (first step in dealing with any virus/worm)
2) Do a *full* system scan (if your scanner doesn't work, boot into safe mode and try)
3) Restart and do -
1. Click Start > Run.
2. Type regedit
3. Click OK.
Note: If the registry editor fails to open the threat may have modified the registry to prevent access to the registry editor. Security Response has developed a tool to resolve this problem. Download and run this tool, and then continue with the removal.
4. Navigate to the following registry subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\"load"
5. In the right pane, delete any values associated with the worm.
6. Exit the Registry Editor.