删除启动项
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]下注册表项目及<>内文件

   <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Science and Technology Corporation Limited]
    <{7C8D1401-A58D-A81C-CD24-A5915C4517C7}><C:\WINDOWS\system32\mnmhgsrv.dll>  [File is missing]
    <{5B1AEF69-DDAE-FDAD-DCAB-698F026ABDB5}><>  [N/A]
    <{55694105-5108-9405-3695-954187462155}><C:\WINDOWS\system32\mpwdeapi.dll>  [File is missing]
    <{9490415F-65F8-B5C5-D8BA-9405FB120549}><C:\WINDOWS\system32\yzztimsn.dll>  [File is missing]
    <{4C648541-1025-9650-9057-6541258720C4}><C:\WINDOWS\system32\mndhddwd.dll>  [File is missing]
    <{4629FF4F-ACDB-5C90-A098-FACB3456A264}><>  [N/A]
    <{6A041F13-A111-12A3-B0CF-F99818AA68A6}><>  [N/A]
    <{4FD45A54-9875-698F-E56E-65102358FDF4}><C:\WINDOWS\system32\apsgdjba.dll>  [File is missing]
    <{81954FAC-1023-154F-895A-1458258AD818}><>  [N/A]
    <{67FD640A-158F-48AC-FD14-1597F14A9776}><C:\WINDOWS\system32\mndsfsrv.dll>  [File is missing]
    <{528DF602-9541-A985-210A-984A698C6F25}><>  [N/A]
    <{22596546-2036-9451-6058-658402589722}><>  [N/A]
    <{2D698451-2015-6358-9871-2015987452D2}><>  [N/A]
    <{4A698102-5904-AFD0-20DF-CD1A65829CA4}><C:\WINDOWS\system32\zycbdime.dll>  [File is missing]
    <{9A59145F-315D-BC23-AC1F-145DF81A34A9}><C:\WINDOWS\system32\zyzxiime.dll>  [File is missing]
    <{50940F85-F015-14F1-A05F-F69858AC6D05}><>  [N/A]
    <{83BA45AF-FAAA-CDDD-BEEE-BCDE1234AB38}><>  [N/A]
    <{470165F1-9F65-569F-F895-F14F58F41074}><C:\WINDOWS\system32\lofsdjbo.dll>  [File is missing]
    <{3E035987-F585-68D1-AC28-98FA58E459E3}><C:\WINDOWS\system32\apfocdet.dll>  [File is missing]
    <{19109876-7619-9101-7012-901938475191}><C:\WINDOWS\system32\ietzapaq.dll>  [File is missing]
    <{35671234-7890-ABCD-CDEF-567801237653}><>  [N/A]
    <{6319A1F1-9410-9654-3201-345FFA349136}><C:\WINDOWS\system32\zywmfime.dll>  [File is missing]
    <{91698482-6555-3666-1222-954784129019}><>  [N/A]
    <{70AF1289-F140-A140-D012-C1458759FC07}><>  [N/A]
    <{32023698-6984-8541-9654-698745012523}><C:\WINDOWS\system32\skqncbib.dll>  [File is missing]
    <{14698742-2059-3025-9058-954023874141}><>  [N/A]
    <{33512378-9874-5641-1025-985420368733}><C:\WINDOWS\system32\oswxcttb.dll>  [File is missing]
    <{1E51C0FD-EE36-434B-AD2A-FD1FF3731C38}><C:\WINDOWS\system32\wyrsdj.dll>  [File is missing]
    <{4A069845-2036-6084-9054-6087502480A4}><>  [N/A]
    <{18093456-9012-4568-9076-908765467181}><C:\WINDOWS\system32\tisqatyu.dll>  [File is missing]
    <{AA59145F-315D-BC23-AC1F-145DF81A34AA}><C:\WINDOWS\system32\zyzxjime.dll>  [File is missing]
    <{EB71E0B3-E97D-4D30-8733-E28266467617}><>  [N/A]
    <{5A069845-2036-6084-9054-6087502480A5}><C:\WINDOWS\system32\ozfyebyt.dll>  [File is missing]
    <{37AC9076-C898-B098-D098-A18319080973}><C:\WINDOWS\system32\nhmxcjkl.dll>  [File is missing]
    <{29109876-7619-9101-7012-901938475192}><C:\WINDOWS\system32\ietzbpaq.dll>  [File is missing]
    <{2A095412-A568-B258-C587-D148E148F0A2}><C:\WINDOWS\system32\cdwsbkop.dll>  [File is missing]
    <{5FD45A54-9875-698F-E56E-65102358FDF5}><C:\WINDOWS\system32\apsgejba.dll>  [File is missing]
    <{77FD640A-158F-48AC-FD14-1597F14A9777}><C:\WINDOWS\system32\mndsgsrv.dll>  [File is missing]
    <{4F4F0064-71E0-4f0d-0003-708476C7815F}><C:\WINDOWS\system32\midimapgj.dll>  [File is missing]
    <{000030AE-0380-4351-8244-EE98A3240370}><C:\WINDOWS\system32\mghefy.dll>  []
    <{E8A3B193-77E3-4FB3-986D-F4FA4828BAFC}><C:\WINDOWS\system32\wklsdd.dll>  [File is missing]
    <{C0595A7E-2E2F-4B34-A83A-019270A0A464}><C:\WINDOWS\system32\tdffdl.dll>  [File is missing]
    <{28EB3777-3E23-4E72-8449-A992D09D24C3}><C:\WINDOWS\system32\zefdst.dll>  [File is missing]
    <{A9895933-6636-4281-BC58-EE6DE2AF96E3}><C:\WINDOWS\system32\ddserh.dll>  [File is missing]
    <{461D2AB4-29A5-45C2-9134-D52272D3DE38}><C:\WINDOWS\system32\rfdswc.dll>  [File is missing]
    <{F99DEFDD-200B-4410-B572-E90883D527D2}><C:\WINDOWS\system32\wrqszl.dll>  [File is missing]
    <{0B846B26-BFE6-4E8E-A948-1DB17B77B483}><C:\WINDOWS\system32\tdfhex.dll>  [File is missing]
    <{841529CB-7F77-4B99-A895-B5441E0D302F}><C:\WINDOWS\system32\jfrwdh.dll>  [File is missing]
    <{8C41B7F7-3168-400D-A702-0E7EFE0BA304}><C:\WINDOWS\system32\sgdewg.dll>  []
    <{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}><>  [N/A]
    <{EA5D4B0E-B8CE-4761-8C7E-5D26369F0EC6}><C:\WINDOWS\system32\fsrgeb.dll>  []
    <{84143967-B645-4BFF-B873-DA1DC886E9A7}><C:\WINDOWS\system32\cedafb.dll>  [File is missing]
    <{45AADFAA-DD36-42AB-83AD-0521BBF58C24}><>  [N/A]
    <{7914E0AA-ECCB-4311-B584-C49538227824}><C:\WINDOWS\system32\jhfrxz.dll>  [File is missing]
    <{259BF3CF-194D-4FE6-9ADB-DE6544B098B6}><C:\WINDOWS\system32\dndsaf.dll>  [File is missing]
    <{5E907A48-400E-4EA8-9792-FFAE052D59E9}><C:\WINDOWS\system32\pedadt.dll>  [File is missing]
    <{0086DD39-EB8E-4504-A085-AC8A433E34D0}><C:\WINDOWS\system32\ydggsx.dll>  [File is missing]
    <{B29583D8-033A-4B9F-8553-7C5458F3FB8E}><C:\WINDOWS\system32\jdsaex.dll>  [File is missing]
    <{4D165A2A-4BC1-4CA8-8299-08E05AAAB5A4}><C:\WINDOWS\system32\tdggrz.dll>  [File is missing]
    <{73AE86E6-7F03-4C3B-8980-FB1DA157D3C7}><C:\WINDOWS\system32\fmcvxy.dll>  [File is missing]
    <{00070007-0007-0007-0007-00070007BB15}><C:\WINDOWS\system32\dpvvoxmh.dll>  [File is missing]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]下注册表项目及<>内文件

  <midimapgj><C:\WINDOWS\system32\midimapgj.dll>  [File is missing]
    <dpvvoxmh.dll><C:\WINDOWS\system32\dpvvoxmh.dll>  [File is missing]

删出服务及对应文件
服务
[5ED83089 / 5ED83089][Stopped/Auto Start]
  <C:\WINDOWS\system32\1B7F9E0E.EXE -d><(File is missing)>
删除驱动
[spnnk / spnnk][Stopped/Manual Start]
  <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_tmp.bat><N/A>
删除浏览器加载项
[]
  {18093456-9012-4568-9076-908765467181} <C:\WINDOWS\system32\tisqatyu.dll, N/A>
[]
  {19109876-7619-9101-7012-901938475191} <C:\WINDOWS\system32\ietzapaq.dll, N/A>
[]
  {29109876-7619-9101-7012-901938475192} <C:\WINDOWS\system32\ietzbpaq.dll, N/A>
[]
  {2A095412-A568-B258-C587-D148E148F0A2} <C:\WINDOWS\system32\cdwsbkop.dll, N/A>
[]
  {32023698-6984-8541-9654-698745012523} <C:\WINDOWS\system32\skqncbib.dll, N/A>
[]
  {33512378-9874-5641-1025-985420368733} <C:\WINDOWS\system32\oswxcttb.dll, N/A>
[]
  {37AC9076-C898-B098-D098-A18319080973} <C:\WINDOWS\system32\nhmxcjkl.dll, N/A>
[]
  {3E035987-F585-68D1-AC28-98FA58E459E3} <C:\WINDOWS\system32\apfocdet.dll, N/A>
[]
  {470165F1-9F65-569F-F895-F14F58F41074} <C:\WINDOWS\system32\lofsdjbo.dll, N/A>
[]
  {4A698102-5904-AFD0-20DF-CD1A65829CA4} <C:\WINDOWS\system32\zycbdime.dll, N/A>
[]
  {4C648541-1025-9650-9057-6541258720C4} <C:\WINDOWS\system32\mndhddwd.dll, N/A>
[]
  {4FD45A54-9875-698F-E56E-65102358FDF4} <C:\WINDOWS\system32\apsgdjba.dll, N/A>
[]
  {55694105-5108-9405-3695-954187462155} <C:\WINDOWS\system32\mpwdeapi.dll, N/A>
[]
  {5A069845-2036-6084-9054-6087502480A5} <C:\WINDOWS\system32\ozfyebyt.dll, N/A>
[]
  {5FD45A54-9875-698F-E56E-65102358FDF5} <C:\WINDOWS\system32\apsgejba.dll, N/A>
[]
  {6319A1F1-9410-9654-3201-345FFA349136} <C:\WINDOWS\system32\zywmfime.dll, N/A>
[]
  {67FD640A-158F-48AC-FD14-1597F14A9776} <C:\WINDOWS\system32\mndsfsrv.dll, N/A>
[]
  {77FD640A-158F-48AC-FD14-1597F14A9777} <C:\WINDOWS\system32\mndsgsrv.dll, N/A>
[]
  {7C8D1401-A58D-A81C-CD24-A5915C4517C7} <C:\WINDOWS\system32\mnmhgsrv.dll, N/A>
[]
  {9490415F-65F8-B5C5-D8BA-9405FB120549} <C:\WINDOWS\system32\yzztimsn.dll, N/A>
[]
  {9A59145F-315D-BC23-AC1F-145DF81A34A9} <C:\WINDOWS\system32\zyzxiime.dll, N/A>
[]
  {AA59145F-315D-BC23-AC1F-145DF81A34AA} <C:\WINDOWS\system32\zyzxjime.dll, N/A>
[]
  {18093456-9012-4568-9076-908765467181} <C:\WINDOWS\system32\tisqatyu.dll, N/A>
[]
  {19109876-7619-9101-7012-901938475191} <C:\WINDOWS\system32\ietzapaq.dll, N/A>
[]
  {29109876-7619-9101-7012-901938475192} <C:\WINDOWS\system32\ietzbpaq.dll, N/A>

[]
  {2A095412-A568-B258-C587-D148E148F0A2} <C:\WINDOWS\system32\cdwsbkop.dll, N/A>
[]
  {32023698-6984-8541-9654-698745012523} <C:\WINDOWS\system32\skqncbib.dll, N/A>
[]
  {33512378-9874-5641-1025-985420368733} <C:\WINDOWS\system32\oswxcttb.dll, N/A>
[]
  {37AC9076-C898-B098-D098-A18319080973} <C:\WINDOWS\system32\nhmxcjkl.dll, N/A>
[]
  {3E035987-F585-68D1-AC28-98FA58E459E3} <C:\WINDOWS\system32\apfocdet.dll, N/A>
[]
  {470165F1-9F65-569F-F895-F14F58F41074} <C:\WINDOWS\system32\lofsdjbo.dll, N/A>
[]
  {4A698102-5904-AFD0-20DF-CD1A65829CA4} <C:\WINDOWS\system32\zycbdime.dll, N/A>
[]
  {4C648541-1025-9650-9057-6541258720C4} <C:\WINDOWS\system32\mndhddwd.dll, N/A>
[]
  {4FD45A54-9875-698F-E56E-65102358FDF4} <C:\WINDOWS\system32\apsgdjba.dll, N/A>
[]
  {55694105-5108-9405-3695-954187462155} <C:\WINDOWS\system32\mpwdeapi.dll, N/A>
[]
  {5A069845-2036-6084-9054-6087502480A5} <C:\WINDOWS\system32\ozfyebyt.dll, N/A>
[]
  {5FD45A54-9875-698F-E56E-65102358FDF5} <C:\WINDOWS\system32\apsgejba.dll, N/A>
[]
  {6319A1F1-9410-9654-3201-345FFA349136} <C:\WINDOWS\system32\zywmfime.dll, N/A>
[]
  {67FD640A-158F-48AC-FD14-1597F14A9776} <C:\WINDOWS\system32\mndsfsrv.dll, N/A>
[]
  {77FD640A-158F-48AC-FD14-1597F14A9777} <C:\WINDOWS\system32\mndsgsrv.dll, N/A>
[]
  {7C8D1401-A58D-A81C-CD24-A5915C4517C7} <C:\WINDOWS\system32\mnmhgsrv.dll, N/A>
[]
  {9490415F-65F8-B5C5-D8BA-9405FB120549} <C:\WINDOWS\system32\yzztimsn.dll, N/A>
[]
  {9A59145F-315D-BC23-AC1F-145DF81A34A9} <C:\WINDOWS\system32\zyzxiime.dll, N/A>
[]
  {AA59145F-315D-BC23-AC1F-145DF81A34AA} <C:\WINDOWS\system32\zyzxjime.dll, N/A>