注册表
<bgswitch><C:\WINDOWS\system32\bgswitch.exe> []
<EXPLORER><C:\Program Files\Common Files\System\wab32res.exe> []
<b40hyut><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1explore.exe> []
<4mbv><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rundl132.exe> []
<l0d6><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iexpl0re.exe> []
<qrzk303cmuf><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\crasos.exe> []
<xj89z><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Servere.exe> []
<mvjl3wj1mzxvqf3><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\c0nime.exe> []
<985cfzjv5c><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\winlog0n.exe> []
<54xgx7i30h5><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Servera.exe> []
cmdbcs><C:\WINDOWS\cmdbcs.exe> []
<shualai><C:\WINDOWS\shualai.exe /i> []
删除以上对应的EXE文件和下面的文件
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\LgSy0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyzo0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rav20.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Gjzo0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Kavs0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Msxo0.dll] [N/A, ]

运行SRENG
在注册表里清除:
<b40hyut><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1explore.exe> []
<4mbv><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rundl132.exe> []
<l0d6><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iexpl0re.exe> []
<qrzk303cmuf><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\crasos.exe> []
<xj89z><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Servere.exe> []
<mvjl3wj1mzxvqf3><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\c0nime.exe> []
<985cfzjv5c><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\winlog0n.exe> []
<54xgx7i30h5><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Servera.exe> []
<cmdbcs><C:\WINDOWS\cmdbcs.exe> []
<shualai><C:\WINDOWS\shualai.exe /i> []
在驱动里删除:
2310_00 / 2310_00][Stopped/Boot Start]
<\SystemRoot\System32\BIRD\2310_00.sys><HighPoint Technologies, Inc.>
结束进程:
[C:\WINDOWS\system32\shualai.dll] [N/A, ]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
删除上面对应的文件,进安全模式下清空TEMP文件夹.
再用反流氓软件扫扫可以程序.重装QQ
不过推荐重做系统比较快点

谢谢啊，，
我试试看！！