用hijackthis扫描后,修复以下项,并删除C:\Program Files\Common Files\SAND整个目录
O4 - 启动项HKLM\\Run: [Update] C:\WINDOWS\system32\Update.exe
O4 - 启动项HKLM\\RunOnce: [uninsrest] C:\DOCUME~1\XX\LOCALS~1\Temp\uninrest.exe
O23 - NT 服务: Universal Disk Manager - Unknown owner - C:\Program Files\Common Files\SAND\client.exe