修复
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<WinAutoUp><C:\WINDOWS\AutoUp.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<UserInit><usrinit.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<adsnt><C:\WINDOWS\AdsNT.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<AlxInit><C:\WINDOWS\System32\AlxUp.exe>
[QoS Service / NHLscA]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
重启到安全模式下
删除
C:\WINDOWS\AutoUp.exe
usrinit.exe
C:\WINDOWS\AdsNT.exe
C:\WINDOWS\System32\AlxUp.exe
C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL