删除以下服务
[52B851FE / 52B851FE][Stopped/Auto Start]
<C:\WINDOWS\system32\34978A02.EXE -k><Microsoft Corporation>
删除以下驱动
[Netgroup Packet Filter / NPF][Running/Manual Start]
<system32\drivers\npf.sys><CACE Technologies>
删除进程中调用的以下文件
[C:\WINDOWS\system32\B2DFC677.DLL] [Microsoft Corporation, ]
[C:\WINDOWS\system32\k11836943754.DAT] [N/A, ]
[C:\WINDOWS\system32\MOSOU.dll] [N/A, ]
[C:\WINDOWS\system32\nwizqjsj.dll] [N/A, ]
[C:\WINDOWS\system32\dh2104.dll] [N/A, ]
[C:\WINDOWS\system32\nwizzhuxians.dll] [N/A, ]
[C:\WINDOWS\system32\k11836979914.DAT] [N/A, ]
[C:\WINDOWS\system32\k11837016084.DAT] [N/A, ]
[C:\WINDOWS\system32\k11837052244.DAT] [N/A, ]
[C:\WINDOWS\system32\k11837088404.DAT] [N/A, ]
[C:\WINDOWS\system32\k11837124574.DAT] [N/A, ]
[C:\WINDOWS\system32\AVPSrv.dll] [N/A, ]
[C:\WINDOWS\system32\nwiztlbb.dll] [N/A, ]
[C:\WINDOWS\system32\k11837160764.DAT] [N/A, ]
[C:\WINDOWS\system32\k11837196924.DAT] [N/A, ]
[C:\WINDOWS\system32\k11837233074.DAT] [N/A, ]
[C:\WINDOWS\system32\WinForm.dll] [N/A, ]
[C:\WINDOWS\system32\TIMHost.dll] [N/A, ]
[C:\WINDOWS\system32\MsIMMs32.dll] [N/A, ]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, ]
删除CDEF下的autorun.inf以及autorun.exe
并将上述有问题的启动项 服务 驱动原文件删除
