Searching Google I found this info, hope it helps:
http://info.ahnlab.com/securityinfo/virus_view_eng_new.jsp?SEQ_NO=2085
"Gopi" wrote:
> hello
> in our network, several system affect by virus and i went on safe mode
and
> edit the registry, delete the values (locate.exe and hpws.exe) restart
and
> its works fine.
>
> after sometime, it affected again. (i cannot edit the registry or
anything)
> again i have to go thro safe mode.
>
> we are using Etrust Antivirus server, is there anyway to clean this?
several
> servers affected with this, and all are having up to date microsoft
patches.
>
> Thanks
> Gopi
>
>
>