Full Version of this article can be found here

Sysconf32.exe

Sysconf32.exe

What is it?
Sysconf32.exe is a file associated with the w32.Noomy.A@mm mass mailing worm

What does it do?
When W32.Noomy.A@mm is executed, it performs the following actions:
  1. Copies itself as %Windir%Sysconf32.exe.
  2. Adds the value:

    "Windows HTML files "="%Windir%Sysconf32.exe"

    to the registry key:

    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
    so that the worm runs when you start Windows.

Copies itself to %System%SystemBck as the following file names:
More info and Removal instructions

@symantec