₦airaland Forum

first u need to get the hidden file filename. i just cleared a few computers on a network from a worm called Brontok (indonesian made) and your symptom matched all of the worm characterisation.

it reboots your pc because it looks for certain words that run on your taskmanager (by the way, this virus load everytime you starts your explorer, )

it also disables registry editing, so the best way, first identify which kind of sub-worm that infect your system because cleaning is slightly different for each sub worm for example brontok.A

then look for how to clean it on sophos website. sorry, im not in any way affiliated with sophos but i've found the manual solution there, good luck ,