1. Start the computer in safe mode. To do this, please follow the following steps: a. Restart the computer.

When the computer starts, press F8 repeatedly (once per second). This will display Microsoft Windows advanced startup menu options.

C use the up and down arrow keys to highlight the safe mode, and then press Enter.

2. Open Internet Explorer and type C:\WINDOWS\system32\drivers in the address bar.

3. Enable viewing hidden files. To do this, please follow the following steps: a. Click Start, My Computer and Tools.

, and then click Folder Options.

B. click "view".

C click to clear the hide protected operating system files (recommended) check box.

D Click to select Show All Files and Folders, and then click Clear to hide extensions of known file types.

E Click to select Apply to All Folders, and then click OK.

4. locate the folder named C:\WINDOWS\system32\drivers.

5. Find anything. Sys file, which has the following characteristics: a. randomly generate a file name consisting of eight lowercase letters, such as

Gbqxmhia.sys, upzvlbvv.sys or jsbmefvk.sys

B the date of the document is 65438+20051October 1 1.

C the file size is14 kb (13,824 bytes).

D. the hidden attribute has been set.

E. The document has no version, product name or manufacturer information.

Right-click the file and select Rename. Rename the file to malware.old, and then press Enter.

7. Find \WINDOWS\system32.

8. Rename the following file (if it exists): msupd5.old (renamed as msupd5.old).

Msupd4.old (renamed msupd4.old)

Msupd.old (renamed msupd.old)

Reloadmedude.old (renamed Reloadmedude.old)

9. Restart the computer.

10. Make sure that the antivirus/antispyware software is updated with the latest signature, and then perform a full system scan.