既然没人看，我就下手了。
因为不知你都安装了啥东西，所以一定得先备份注册表，和下面提到的对应文件。
在安全模式下，用扫日志的SRENG工具删除注册表项，用冰刃删除对应文件。
服务
[kernl32 / kernl32][Stopped/Auto Start]
<C:\WINDOWS\system32\kernl32.exe><N/A>
[svchost / svchost][Stopped/Auto Start]
<C:\WINDOWS\svchost.exe><N/A>
[Windows XP / Windows][Stopped/Auto Start]
<C:\WINDOWS\system32\servet.exe><N/A>
驱动程序
[FltMgr / FltMgr][Stopped/Boot Start]
<\SystemRoot\system32\DRIVERS\fltMgr.sys><N/A>
[NetGroup Packet Filter Driver / NPF][Stopped/Manual Start]
<system32\drivers\npf.sys><N/A>
[npkcusb / npkcusb][Running/Auto Start]
<\??\D:\Program Files\Tencent\QQ\npkcusb.sys><INCA Internet Co., Ltd.
[Intel(R) PRO/Wireless 3945ABG Adapter Driver / w39n51][Stopped/Manual Start]
<system32\DRIVERS\w39n51.sys><Intel? Corporation>
浏览器加载项
[SSVHelper Class]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <D:\jre1.5.0_07\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} <D:\jre1.5.0_07\bin\ssv.dll, Sun Microsystems, Inc.>
[@btrez.dll,-4015]
{CCA281CA-C863-46ef-9331-5C8D4460577F} <, N/A>
[CEditCtrl
Object]
{488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[Java Plug-in]
{8AD9C840-044E-11D1-B3E9-00805F499D93} <D:\jre1.5.0_07\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in]
{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA} <D:\jre1.5.0_07\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_07]
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <D:\jre1.5.0_07\bin\npjpi150_07.dll, Sun Microsystems, Inc.>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation>
[EWA Control]
{18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <D:\PROGRA~1\PPLive\SYNACA~2.OCX, Synacast>
[iTrusPTA Class]
{1E0DFFCF-27FF-4574-849B-55007349FEDA} <C:\WINDOWS\system32\aliedit\pta.dll, >
[DHTML Edit Control Safe for Scripting for IE5]
{2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[CEditCtrl
Object]
{488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[List Control]
{70CACCCA-8B83-4BCB-B2D1-188E9A495527} <D:\PROGRA~1\PPLive\SYNACA~1.OCX, >
[SSVHelper Class]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <D:\jre1.5.0_07\bin\ssv.dll, Sun Microsystems, Inc.>
[ShowBarObj Class]
{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} <C:\WINDOWS\system32\ActiveToolBand.dll, HiTRUST>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\system\msadc\msadco.dll, Microsoft Corporation>
[OWSClientMiscApis Class]
{BDEADE3F-C265-11D0-BCED-00A0C90AB50F} <D:\PROGRA~1\MICROS~2\OFFICE11\OWSCLT.DLL, Microsoft Corporation>
[OWSBrowserUI Class]
{BDEADE43-C265-11D0-BCED-00A0C90AB50F} <D:\PROGRA~1\MICROS~2\OFFICE11\OWSCLT.DLL, Microsoft Corporation>
[发送到 Bluetooth 设备(&B)...]
<C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm, N/A>
————————————————————————————————————————————————
用SRENG修改：
启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,c:\WINDOWS\nBjDg.exe> [N/A]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
将 <Userinit><C:\WINDOWS\system32\userinit.exe,c:\WINDOWS\nBjDg.exe> [N/A]
改为 <Userinit><C:\WINDOWS\system32\userinit.exe,>
并用冰刃删除 nBjDg.exe 文件。
————————————————————————————————————————————————
用SRENG修复文件关联。
文件关联
.TXT Error. [NOTEPAD %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
——————————————————————————————————————————
重启进正常系统，以上文件再出，用冰刃或费尔木马或Unlocker删除文件。
如有软件或硬件异常，重新安装。
彻底卸载所有QQ软件，并删除QQ安装目录下的所有文件。重装QQ
如还不行，已我的能力已无奈了。
