删除以下启动项
<Microsoft Autorun5><C:\WINDOWS\system32\mosou.exe> []
<Microsoft Autorun10><C:\WINDOWS\system32\nwizwmgjs.exe> []
<Microsoft Autorun7><C:\WINDOWS\system32\nwizqjsj.exe> []
<TIMHost><C:\WINDOWS\TIMHost.exe> []
<MsIMMs32><C:\WINDOWS\MsIMMs32.exe> []
<AVPSrv><C:\WINDOWS\AVPSrv.exe> []
<twin><C:\WINDOWS\system32\ctfnom.exe> [Microsoft Corporation]
<{26368135-64FA-BC34-DA32-DCF4FD431C92}><C:\WINDOWS\system32\qhbpri.dll> [N/A]
<N/A><C:\WINDOWS\system32\nwizzhuxians.exe> []
删除以下服务
[E01FA41F / E01FA41F][Stopped/Auto Start]
<C:\WINDOWS\system32\8A4CD76B.EXE -d><Microsoft Corporation>
[Win32 Debug Service / MSDebugsvc][Stopped/Auto Start]
<C:\WINDOWS\system32\rundll32.exe msdebug.dll,input><Microsoft Corporation>
[WinXP DHCP Service / WinXPDHCPsvc][Stopped/Auto Start]
<C:\WINDOWS\system32\rundll32.exe xpdhcp.dll,input><Microsoft Corporation>
[Remote Debug Service / RemoteDbg][Stopped/Auto Start]
<C:\WINDOWS\system32\rundll32.exe RemoteDbg.dll,input><Microsoft Corporation>
删除以下驱动
[kygp / kygpu][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\kygpu.sys><N/A>
[nted54or / nted54or][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\nted54or.sys><N/A>
并按地址删除原文件，以及
[C:\WINDOWS\system32\winlib .dll] [N/A, ]
[C:\WINDOWS\system32\94879A32.DLL] [Microsoft Corporation, ]
[C:\WINDOWS\system32\sqzxqma.dll] [N/A, ]
[C:\WINDOWS\system32\MOSOU.dll] [N/A, ]
[C:\WINDOWS\system32\nwizwmgjs.dll] [N/A, ]
[C:\WINDOWS\system32\nwizqjsj.dll] [N/A, ]
[C:\WINDOWS\system32\11843948858.DAT] [N/A, ]
[C:\WINDOWS\system32\11843948879.DAT] [N/A, ]
[C:\WINDOWS\system32\11843985448.DAT] [N/A, ]
[C:\WINDOWS\system32\11843985479.DAT] [N/A, ]
[C:\WINDOWS\system32\11844022508.DAT] [N/A, ]
[C:\WINDOWS\system32\11844022579.DAT] [N/A, ]
[C:\WINDOWS\system32\TIMHost.dll] [N/A, ]
[C:\WINDOWS\system32\MsIMMs32.dll] [N/A, ]
[C:\WINDOWS\system32\AVPSrv.dll] [N/A, ]
[C:\WINDOWS\system32\msdebug.dll] [N/A, ]
[C:\WINDOWS\system32\11843948879.DAT] [N/A, ]
[C:\WINDOWS\system32\11843948858.DAT] [N/A, ]
[C:\WINDOWS\system32\11843985479.DAT] [N/A, ]
[C:\WINDOWS\system32\11843985448.DAT] [N/A, ]
[C:\WINDOWS\system32\11844022579.DAT] [N/A, ]
[C:\WINDOWS\system32\11844022508.DAT] [N/A, ]
[C:\WINDOWS\system32\xpdhcp.dll] [N/A, ]