c:\windows\eksplorasi.exe
c:\windows\shellnew\sempalong.exe
c:\documents and settings\administrator\local settings\application data\smss.exe
c:\documents and settings\administrator\「开始」菜单\程序\启动\empty.pif
c:\documents and settings\administrator\local settings\application data\services.exe
c:\documents and settings\administrator\local settings\application data\winlogon.exe
c:\documents and settings\administrator\local settings\application data\lsass.exe
以上文件压缩发送到http://up.rising.com.cn/webmail/uploadnew.htm
使用卡卡助手清理系统，并升级瑞星到最新版本，安全模式全盘杀毒
