Norton的網頁有提到
http://securityresponse.symantec.co...ker.trojan.html
1. Disabling System Restore (Windows Me/XP)
2. Updating the virus definitions

3. Scanning for and deleting the infected files
Start your Symantec antivirus program and make sure that it is configured to scan all the files.
For Norton AntiVirus consumer products: Read the document, "How to configure Norton AntiVirus to scan all files."
For Symantec AntiVirus Enterprise products: Read the document, "How to verify that a Symantec Corporate antivirus product is set to scan all files."
Run a full system scan.
If any files are detected as infected with PWS.Hooker.Trojan, click Delete

4. Deleting the value from the registry
Click Start, and then click Run. (The Run dialog box appears.)
Type regedit
Then click OK. (The Registry Editor opens.)
Navigate to the key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
In the right pane, delete the following value:
"kernel32"="C:\%System%\kern32.exe"
Click Registry, and click Exit.