The following instructions pertain to all current and recent Symantec antivirus products, including the Symantec AntiVirus and Norton AntiVirus product lines.
1. Disable System Restore (Windows XP).
2. Update the virus definitions.
3. Do one of the following:
* Windows 95/98/Me/2000/XP: Restart the computer in Safe mode.
* Windows NT: End the malicious process.
4. Run a full system scan and delete all the files detected as W32.Randex.E.
5. Reverse the changes that the worm made to the registry (Windows NT/2000/XP).
6. Remove the lines that the worm added to the System.ini file (Windows 95/98/Me).