Determines whether the vulnerable DLL exists on the computer, by first searching the registry, and then all the local hard disks for ssnetlib.dll, locates the worm thread in the sqlserver.exe process and puts it to sleep.