How To Delete Trojan
To remove this Trojan:
1. Restart the computer in MS-DOS mode, and then delete the C:\Windows\Wincmp32.exe file.
2. Restart the computer in Safe Mode.
3. Use the System Editor (Sysedit.exe) to edit the Win.in and System.ini files. Remove any references to Wincmp32.exe (or to Winupd32.exe).
4. Remove the registry entries made by the Trojan:
CAUTION: We strongly recommend that you back up the system registry before making any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure you modify only the keys specified. Please see the document How to back up the Windows registry before proceeding.
a. Click Start, and click Run. The Run dialog box appears.
b. Type regedit and then click OK. The Registry Editor opens.
c. Navigate to the following subkey:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
d. In the right pane, delete the value:
SystemAdministration Wincmp32.exe (Or Winupd32.exe.)
NOTE: Other file names have been reported. In any case, delete the SystemAdministration value.
e. Repeat steps 3 and 4 for the registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
5. Restart the computer.
