Aliases
Affected Operating Systems
Recovery Instructions:
Please follow the instructions for removing worms.
Please read the instructions for removing worms.
You should also remove the following files from your system.
From the Windows system32 folder:
RUN.JS
CLEMAIL.EXE
TIMER.DLL
PWDUMP2.EXE
SAMDUMP.DLL
From the Windows system32\drivers folder:
SERVICES.EXE
All these files have the 'hidden' attribute set. To remove these files from the computer, locate, unhide and delete them.
For TIMER.DLL the command "%windir%\system32\regsvr32.exe /u TIMER.DLL" will also need to be run before deleting the file.