The virus, reader_s.exe , resides in c:\windows\system32\ as well as C:\documents and settings\USERNAME\

reader_s.exe MD5:0E4B98622B935374D8DCC5FD6C9258AB

%System%\reader_s.exe
C:\windows\system\reader_s.exe
%UserProfile%\reader_s.exe
%Temp%\windows\system32\reader_s.exe
c:\windows\system32\dllcache\ndis.sys
c:\windows\system32\drivers\ndis.sys

Click here to download Spyware Cleaner 2009 to Remove reader_s.exe