Article ID: 276579
Article Last Modified on 1/29/2007
APPLIES TO
- Microsoft Windows Millennium Edition
- Microsoft Windows 98 Standard Edition
- Microsoft Windows 95
- Microsoft Windows 98 Second Edition
This article was previously published under Q276579
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows Registry
SYMPTOMS
When you use your computer, you may experience one or more of the following symptoms:
- Windows may start slowly.
- Programs may start slowly.
- You may receive the following error message when you start your computer:
- The "startIE @ 'notepad qazwsx.hsq'" value may exist in the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
CAUSE
This issue can occur if your computer has been infected with the Qaz.trojan virus. This virus is also known as W32.hllw.qaz.a or Qaz.worm. This trojan virus is often distributed in a modified version of the Distributed.net file.
RESOLUTION
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
To resolve this issue, use an antivirus program to detect and remove the virus.
To work around this issue, perform the following steps:
- Start your computer to a command prompt:
- For Windows 95, when you see the "Starting Windows 95" message, press the F8 key, and then choose Command Prompt Only from the Startup menu.
- For Windows 98, press and hold down the CTRL key after your computer completes the Power On Self Test (POST), and then choose Command Prompt Only from the Startup menu.
- For Windows Millennium Edition (Me), insert the Windows Me Startup disk in drive A, and then restart your computer. When the Microsoft Windows Me Startup menu appears, choose Start Computer With CD-ROM Support. At the command prompt, type:
C:
Then press ENTER.
- At the command prompt, type the following commands, pressing ENTER after each command:
cd windows
del note.com
del notepad.exe
del wininit.exe - Press CTRL+ALT+DELETE to restart your computer.
- Use Registry Editor to delete the "startIE @ 'notepad qazwsx.hsq'" value from the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
- Extract new copies of the Notepad.exe and Wininit.exe files from your Windows CD-ROM.
For additional information about how to extract files, click the article number below to view the article in the Microsoft Knowledge Base:129605 How to Extract Original Compressed Windows Files
MORE INFORMATION
For additional information about the Qaz.trojan virus, please view the following Symantec and McAfee Web sites:
Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
Keywords: kbenv kberrmsg kbprb KB276579
