How to write Windows registry script?

How do I remove a registry key that has a virus?

• Windows update doesn't work (error message; "Windows Update cannot currently check for updates because the service is not running"). All of the tools normally used to fix this problem didn't work including the removal/reinstall tools. Through many processes, I found out I obtained a conficker virus (None of the anti-virus programs detect it) which apparently deleted Automatic Windows Update in the services.msc console and also affected syshost32 which now states <failed to read description. Error code: 5> and "A required entry in the registry is missing or an attempt to write to the registry failed". I was told to reinstall wuaueng.dll however when I try it states "The module "wuaueng.dll" was loaded but the call to DllRegisterServer failed with error code 0x80070005". That error code (0x80070005) points to permission issues however I'm using the admin account and running cmd as administrator. I downloaded a program called process explorer (process monitor wouldn't work) as instructed and found that under syshost a Temp file appears for a split second (6f9ffa35191f0666) with the description "Ms Scan Disc Application" and within that two files appear, both being winlogon.exe. When I try to terminate this process I'm told Access is Denied. So I downloaded security task manager and found syshost listed under {B06C668B-58C3-BE66-7ED1-74E15E7E28A3}. When I try to run as administrator it states that "windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item." I'm wondering if removing syshost will fix the issue and, if so, how I go about doing so.

• Answer:

  You may want to have a look here: http://support.microsoft.com/kb/962007 And here: http://www.microsoft.com/security/pc-security/conficker.aspx Here is a removal tool: http://download.cnet.com/Conficker-Removal-Tool/3000-2239_4-10911447.html