Affected Operating Systems
Recovery Instructions:
Please follow the instructions for removing Trojans.
Please read the instructions for removing Trojans.
You will also need to delete the following registry keys, if they are present. They are less likely to be present in Windows 95/98/Me.
At the Windows taskbar, select Start|Run. Type 'Regedit' and press return. The registry editor will open.
Before you edit the registry, you should make a backup. In the Registry menu, click on Export Registry File, in Export Range select All, then save your registry as Backup.
Locate the HKEY_LOCAL_MACHINE key:
HKLM\Software\Microsoft\Windows\CurrentVersion
\RunServices\System32 = Windows System32\system.exe
and delete the reference to system.exe.
Each user has a registry area named HKEY_USERS\'code number indicating user'\. For each user locate the key:
HKU\code number\Software\Microsoft\Windows
\CurrentVersion\Run\SERVER.EXE = Windows\SERVER.EXE
Delete the reference to SERVER.EXE.
Close the Registry Editor and restart your computer.