The virus possible cause was most likely a sims2keygen.exe file. I run that program and nothing happened, hours later i noticed problems with my internet. Windows explorer wont connect to any web page, similarly msn messenger wont connect and all other internet programs expeirencing problems. I went to my windows registry in the run folder, i found a file 'Windows Internet expIorer wksvs.exe' i deleted this file and restarted windows and internet worked again momentarily then the file came back and same problem exists. i noticed expIorer was spelt wrong as it has an I not a L in it. I also run spybot and found W32.Coflop_MM worm in a kazaa folder which i dont have on my computer anymore. I deleted it but it came back too although i dont think this file is related to my problem. Anyone know whats going on?

Have you emptied the temp internet files, turned system restore off and restarted the computer and during the restart entered the safe mode and ran your antivirus scan while in it?

1st of all I'm sure that Kazaa is jammed with spy and adware, I would get rid of it. Then maybe try Spybot S&D Make sure to up-date it before using it. 1-Check for problems 2-Fix Problems 3-Immunize That should help tp clear up your problem Hopefully you didn't turn off system restore yet, as you could try rolling back to a previous time If you need a simple solution, try mine. I try to give advise on things that have happened to my PC. Changes in registry can be FATAL! Glad to have a chance to help you.

I've got this f**king virus last week. I try to remove it by installing MS sasser patch and by deleting all wksvs.exe entries I've found in regedit. After that, I delete a file named wksvs.exe*.pf in windows\prefetch folder. Reboot. The virus disapeared for a week but today it came back. Do anyone have a solution. I did not find any article about this one. The only page talking about it is this one. PLEASE, WE NEED HELP. Gozer The Gozerian

Using start/run/msconfig uncheck wksys.exe entry in Startup flag and check \safeboot in Boot.ini, machine will restart in safemode. Delete wksvs.exe*.pf in windows\prefetch folder and wksvs.exe in windows\system32. Use regedit to find and delete all references to wksvs. Restart normally, should now be ok.