Taken From:
http://securityresponse.symantec.com/avcenter/venc/data/bac
kdoor.hogle.html
Disable System Restore (Windows Me/XP).
Update the virus definitions.
Do one of the following:
Windows 95/98/Me: Restart the computer in Safe mode.
Windows NT/2000/XP: End the Trojan process.
Run a full system scan and delete all the files detected
as Backdoor.Hogle.
Delete the value that was added to the registry.
For specific details on each of these steps, read the
following instructions.
1. Disabling System Restore (Windows Me/XP)
If you are running Windows Me or Windows XP, we recommend
that you temporarily turn off System Restore. Windows
Me/XP uses this feature, which is enabled by default, to
restore the files on your computer in case they become
damaged. If a virus, worm, or Trojan infects a computer,
System Restore may back up the virus, worm, or Trojan on
the computer.
Windows prevents outside programs, including antivirus
programs, from modifying System Restore. Therefore,
antivirus programs or tools cannot remove threats in the
System Restore folder. As a result, System Restore has the
potential of restoring an infected file on your computer,
even after you have cleaned the infected files from all
the other locations.
Also, a virus scan may detect a threat in the System
Restore folder even though you have removed the threat.
For instructions on how to turn off System Restore, read
your Windows documentation, or one of the following
articles:
"How to disable or enable Windows Me System Restore"
"How to turn off or turn on Windows XP System Restore"
-----------------------------------------------------------