Removing the Config Worm Viruses from Infected Windows Systems

====================================================================

The config worm virus is a highly contagious malware strain that can infect and compromise various versions of Microsoft's operating systems, including but not limited as: Windows XP, Vista, 7, Server 2003/2008. Once executed on an infected computer system, the Config Worm rapidly propagates itself by creating copies within user profiles directories, using multiple names to avoid detection.

Symptoms of a config worm infection can be quite subtle at first glance; however, they often include but are not limited too:

- Unexplained slowness or freezing of the operating system

- Frequent blue screen (BSOD) errors during boot-up procedures

- STOP 0x00000007 {catastrophic failure} error messages may appear

To successfully remove this virus from your infected Windows machine, follow these step-by-step instructions carefully:

Step #1: Open Task Manager and End the Process

------------------------------------------------

1. Press Ctrl + Shift + Esc to open Task Manager.

2. In the Processes tab, look for any processes named 'explorer.exe' or similar (they might be running under different user accounts).

3. Right-click on these processes and select 'End task' to force them closed.

Step #2: Delete Suspicious Files from User Profile Directories

-------------------------------------------------------------

1. Open Windows Explorer by double clicking the Start menu > Computer for Vista/7 users, or right click anywhere in File Explorer's address bar then choose 'File explorer' on Win8/8.1.

2. Navigate to C:\Users\Username\AppData\Local and delete all files named 'Ground.exe' or similar looking executables.

Step #3: Use Regedit to Remove Registry Entries

-------------------------------------------------------------

Warning: Editing the registry can result in permanent data loss! Proceed with caution!

1. Press Windows + R on your keyboard, then type 'regedit' without quotes.

2. In the left pane under 'HKEY_LOCAL_MACHINE', navigate down through these keys:

- Software -> Microsoft -> Windows NT

-> CurrentVersion -> RunOnceEx

3. Delete any entries that contain strings like '{B8A5CFA-1BC4-42EB-BE98-F7F0DAB2F43}' or similar.

Step #4: Use Msconfig to Disable Startup Items and Services

---------------------------------------------------------------------

1. Press Windows + R on your keyboard, then type 'msconfig' without quotes.

2. In the 'Startup' tab, uncheck all boxes next to any entries listed under both sections ('Started with Windows') & ('Delayed Start').

3. Click OK when prompted.

Step #5: Reboot Your Computer and Perform a Full System Scan

---------------------------------------------------------------------

1. Once you've completed steps 2-4 above, restart your computer by shutting it down using the power button if necessary.

2. Upon boot-up, immediately run an up-to-date full system scan with both Microsoft Security Essentials (if installed) AND/Or any third-party Antivirus software suites available on your machine.

By following these detailed instructions carefully and thoroughly removing all traces of the Config Worm virus from your infected Windows systems, you should be able to restore normal operating speeds while also preventing re-infection through future infections.

Config worm virus