Aliases
Affected Operating Systems
Recovery Instructions:
Please follow the instructions for removing Trojans.
Windows 95/98/Me/NT/2000/XP/2003
First, you must rename the registry before editing it. Please read the warning about editing the registry.
- Using Windows explorer, browse to the Windows folder (usually C:\Windows or C:\Winnt) right-click Regedit.exe and make a copy of it.
- Rename the copy of Regedit.exe to TempReg.com.
- At the taskbar, click Start|Run. Type 'TempReg.com' and press Return. The registry editor opens.
Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.
Locate the HKEY_LOCAL_MACHINE entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Configuration Update
and delete it if it exists.
Each user has a registry area named HKEY_USERS\[code number indicating user]\. For each user locate the entry:
HKU\[code number]\Software\Microsoft\Windows\
CurrentVersion\RunOnce\Configuration Update
and delete it if it exists.
Close the registry editor.
Then follow the instructions for removing Trojans.
Other platforms
Please read the instructions for removing Trojans.