As soon as they are sent, the worm deletes copies of the messages so that there is no record of its presence. This will run the next time the computer is started. The Regedit.exe file is moved into the Recycle Bin as a hidden system file named Recycled.vxd. Rcycldbn.dat is a copy of the Scanreg.vbs file. Dbindex.vbs is set to be run when ICQ is run.
Additional instructions are available on the download page.
What follows are instructions for manually removing the worm. In most cases we recommend that you download and run the previously mentioned removal tool. If you are not able to do so at this time, or if you prefer to use the manual removal procedure, please follow, in turn, the instructions in each section. Due to the large number of modifications made to the system by the worm, the procedure described in this document is complex and assumes that you are familiar with basic Windows and DOS procedures. If you are not, then we suggest that you obtain the services of a qualified computer consultant.