Aliases
Affected Operating Systems
Recovery Instructions:
Please follow the instructions for removing worms.
In Windows NT/2000/XP/2003 you will also need to edit the following registry entry. The removal of this entry is optional in Windows 95/98/Me. Please read the warning about editing the registry.
At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.
Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.
Locate the HKEY_LOCAL_MACHINE entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
desktop = C:\<Windows System32>\desktop.exe
and delete it if it exists.
Close the registry editor.
- Check your administrator passwords and review network security.
- The AutoShareServer and AutoShareWks registry entries disable administrative shares. Renable them if required.
- You should read the bulletin and, where appropriate, install the Microsoft patch MS04-011 or, on single computers, update with all relevant security patches from Windows update.
Note: Microsoft has documented several known issues with the MS04-011 update in Microsoft Knowledge Base Article 835732. Read this article carefully before applying the update. If any of the described problems occur after applying the update, please contact Microsoft support.