朋友,推荐你重做系统比较快点.要是手动杀的话,可能有写程序会被破坏的.问题太多了......看得我眼花了.....可能我的处理方法还不完整.而且有些东西你要用IS删的.比较麻烦.而且可能还有后遗症.还有,你的流氓软件依然没有清理干净.不过问题基本都在C盘下,重做系统能解决.推荐重做系统.
手动杀的话:
运行SRENG
在注册表里删:
<Desktop><"C:\WINDOWS\system32\internet.exe"> []
<shell><Explorer.exe asp.exe> [N/A]把后面的ASP.EXE去掉
<AppInit_DLLs><C:\WINDOWS\system32\NTDLL32.dll> [N/A]后面的<C:\WINDOWS\system32\NTDLL32.dll>删掉
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellService
ObjectDelayLoad]
<SysChunk><C:\WINDOWS\system32\syschunk.dll> [N/A]
<ovaj><C:\PROGRA~1\nusi\ovaj.dll> [N/A]
<wbwk><C:\PROGRA~1\nusi\ovaj.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptimg]
<WinlogonNotify: cryptimg><cryptig.dll> [N/A]
删除服务:
[System Administrator / AtWork][Running/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\ppjuw.dll><Microsoft Corporation>
[Internet Connection Manager / Internet Connection Manager][Stopped/Auto Start]
<"C:\WINDOWS\system32\internet.exe"><N/A>
[Logical Disk Manager Amdindistrative Service9 / S8696669][Stopped/Auto Start]
<c:\windows\system\m9\iexplorer.exe><N/A>(这个我不确定.你可以找找资料)
[TP-LINK配置服务程序 / ACS][Stopped/Auto Start]
<C:\WINDOWS\system32\acs.exe><N/A>(不是你自己装的就灭掉)
[RestoreService / RestoreService][Stopped/Auto Start]
<C:\WINDOWS\system32\Svchost.exe -k RestoreService-->C:\WINDOWS\system32\drivers\restore.dll><N/A>
[Windows qxvl RunThem / qxvl][Running/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\PROGRA~1\lsqg\vcaq.dll>< >
[Gentad / Gentad][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\struts.dll><N/A>
[Imsvc / Imsvc][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\Webmail.dll><N/A>
[NT Data Provider / SoSCAR][Stopped/Auto Start]
<C:\WINDOWS\SYSTEM32\RUNDLL2KXP.EXE C:\WINDOWS\SYSTEM32\WBEM\YWWCE.DLL,Export 1087><Microsoft Corporation>
Vsn wdbu Service / wdbu][Stopped/Auto Start]
<C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\cjhx\jqoe.dll,Service><Microsoft Corporation>
[ijimot / ijimot][Running/Auto Start]
<C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\COMMON~1\vjimut\vjimut.dll,Service -s><Microsoft Corporation>
删除驱动:
[aslm75 / aslm75][Running/Manual Start]
<\??\C:\WINDOWS\system32\drivers\aslm75.sys><N/A>
[adpu64 / adpu64][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\adpu64.sys><N/A>
[cdjibcag / cdjibcag][Stopped/Boot Start]
<\SystemRoot\system32\drivers\cdjibcag.sys><N/A>
[cdnprot / cdnprot][Running/]
<2 - 系统找不到指定的文件。
><N/A>
[cmhtmo6 / cmhtmo60][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\cmhtmo60.sys><N/A>
[decdehbg / decdehbg][Stopped/Boot Start]
<\SystemRoot\system32\drivers\decdehbg.sys><N/A>
ffpbek / ffpbek][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\ffpbek.sys><N/A>
[stdio / stdio][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\stdio.sys><N/A>
[mspcidrv / mspcidrv][Running/System Start]
<system32\DRIVERS\mspcidrv.sys><N/A>
[qoex / qoexp][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\qoexp.sys><N/A>
[ws2ifsd / ws2ifsd][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\ws2ifsd.sys><N/A>
[WINIO / WINIO][Stopped/Manual Start]
<\??\C:\WINDOWS\Downloaded Program Files\winio.sys><N/A>
[FBS / FBS][Running/Manual Start]
<\??\C:\WINDOWS\system32\drivers\FBS.sys><N/A>
后面的看不动了......实在不行了...就前面的东西就有那么多的东西要处理掉...
