system
10
I’ve just recovered my system from Bagle.hk (as it is named by Kaspersky). And that’s what I did.
Try searching and deleting every single mention of hldrrr and srosa in registry. In my case there was no wintems.exe file, so I’m not sure if it’s in registry. After that reboot and if you cleaned registry good worm will not be active, so you can search for infected files. Try searching for files with the same size and date/time as virus (hldrrr and wintems). Also check programs in auto-run.
You can search more information by using words “srosa” and “Bagle” (or “Beagle”) and use Kaspersky online file checking.