Get rid of Files and Folder ( Help )
%UserProfile%\Local Settings\Application Data\WINDOWS\CSRSS.EXE
%UserProfile%\Local Settings\Application Data\WINDOWS\LSASS.EXE
%UserProfile%\Local Settings\Application Data\WINDOWS\SERVICES.EXE
%UserProfile%\Local Settings\Application Data\WINDOWS\SMSS.EXE
%UserProfile%\Local Settings\Application Data\WINDOWS\WINLOGON.EXE
%System%\Coollman.scr
%System%\Driver\Printer\LX300\Ac.ico
%System%\Driver\Printer\LX300\akses.ico
%System%\Driver\Printer\LX300\com.ico
%System%\Driver\Printer\LX300\CPL.ico
%System%\Driver\Printer\LX300\doc.ico
%System%\Driver\Printer\LX300\film.ico
%System%\Driver\Printer\LX300\Folder.ico
%System%\Driver\Printer\LX300\IE.ico
%System%\Driver\Printer\LX300\jpg.ico
%System%\Driver\Printer\LX300\panel.ico
%System%\Driver\Printer\LX300\pdf.ico
%System%\Driver\Printer\LX300\pps.ico
%System%\Driver\Printer\LX300\ppt.ico
%System%\Driver\Printer\LX300\setup.ico
%System%\Driver\Printer\LX300\setup2.ico
%System%\Driver\Printer\LX300\txt.ico
%System%\Driver\Printer\LX300\winamp.ico
%System%\Driver\Printer\LX300\winrar.ico
%System%\Driver\Printer\LX300\winzip.ico
%System%\Driver\Printer\LX300\xls.ico
%System%\shell.exe
%System%\userinit.exe,
%SystemDrive%\49U5T1N4.exe
%SystemDrive%\Renungan Illahi.txt
%SystemDrive%\Renungan Illahi.txt.exe
%SystemDrive%\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.pif
%SystemDrive%\Documents and Settings\All Users\Start Menu\Programs\Startup\Hayalan.exe
%SystemDrive%\Perenungan Illahi.txt

Delete following folders ( Help )
— No traces available —

Delete Registry Values ( Help )
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”LogonAdministrator” = “C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\CSRSS.EXE”
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”System Monitoring” = “C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\LSASS.EXE”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\49U5T1N4″ = “C:\WINDOWS\49U5T1N4.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\MSMSGS” = “C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\WINLOGON.EXE”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ServiceAdministrator” = “C:\Documents and Settings\Administrator\Local Settings\Application Data\WINDOWS\SERVICES.EXE”