| 引用: |
【genuinechen的贴子】重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows
运行Hijackthis，扫描结束后在下列选项前打上勾，然后选修复“Fix Checked”：
O2 - BHO: (no name) - RsAutorunsDisabled - (no file)
O2 - BHO: ???廖 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - (no file)
O2 - BHO: (no name) - {0C7C23EF-A848-485B-873C-0ED954731014} - (no file)
O2 - BHO: 貝覮???^ - {0CA51D02-7739-43EA-8D9A-1E8AD4327B03} - ???趬^ (file missing)
O2 - BHO: ???廖 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - (no file)
O2 - BHO: ^ - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: 潯汧?潔汯慢?效灬牥^ - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O9 - Extra button: (no name) - RsAutorunsDisabled - (no file)
O10 - Unknown file in Winsock LSP: d:\windows\system32\hbmter.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{CC71A8ED-0E14-4938-8F95-D6A72880B58C}: NameServer = 211.98.4.1 211.98.2.4
O23 - Service: Network System (Universal Disk Manager) - Unknown owner - D:\Program Files\Common Files\SAND\Network.exe (file missing)
显示隐藏文件
双击我的电脑--工具---文件夹选项--查看选项卡--单击选取"显示隐藏文件或文件夹"--清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示您确定更改时，单击“是”--单击“确定”。
然后找到如下文件并删除（如果有的话）。
D:\Program Files\Common Files\SAND(整个目录)
另外,d:\windows\system32\hbmter.dll是什么不清楚,待查
........................... |
修复后所对应的如下：（仍有没法删除的）
O2 - BHO: ^ - RsAutorunsDisabled - (no file)
O2 - BHO: (no name) - {0C7C23EF-A848-485B-873C-0ED954731014} - (no file)
O2 - BHO: ^ - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - (no file)
O2 - BHO: ^ - {AA58ED58-01DD-4d91-8333-CF10577473F7} - ?篚??踿廰 (file missing)
O10 - Unknown file in Winsock LSP: d:\windows\system32\hbmter.dll
O10 - Unknown file in Winsock LSP: d:\windows\system32\hbmter.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{CC71A8ED-0E14-4938-8F95-D6A72880B58C}: NameServer = 211.98.4.1 211.98.2.4
O23 - Service: Network System (Universal Disk Manager) - Unknown owner - D:\Program Files\Common Files\SAND\Network.exe (file missing)
