NT Versions Affected:

3.5, 3.51, 4.0


Problem:

Rollback.exe wipes out all registry entries, and forces a reinstall of NT.

Rollback.exe does not display warning messages before wiping registry. This .EXE can be trojaned simply by renaming and distributing the file.


Verification:

http://www.microsoft.com/kb/articles/q149/2/83.htm