【回复“斐阳”的帖子】
1、用XDELBOX删除下列文件:
C:\Program Files\Common Files\Microsoft Shared\MSINFO\System6.ins
C:\WINDOWS\system32\rsztcpm.dll
C:\WINDOWS\system32\rsmyepm.dll
C:\WINDOWS\system32\kawdbzy.dll
C:\WINDOWS\system32\avwlbmn.dll
C:\WINDOWS\system32\rarjbpi.dll
C:\WINDOWS\system32\kapjbzy.dll
C:\WINDOWS\system32\avwgdmn.dll
C:\WINDOWS\system32\avzxdmn.dll
C:\WINDOWS\system32\avwlcmn.dll
C:\WINDOWS\system32\zhjtrx.dll
2、重启后,用SRENG编辑下列注册表内容(使AppInit_DLLs项为空):
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><rarjbpi.dll> []
用SRENG删除下列注册表内容:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{37C3125C-9CB6-4503-8F38-63D80ADEFA07}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\System6.ins> []
<{5D47B341-43DF-4563-753F-345FFA3157D5}><C:\WINDOWS\system32\kvmxema.dll> []
<{334345F1-DACF-3452-CB7D-4620F34A1533}><C:\WINDOWS\system32\rsztcpm.dll> []
<{5E32FA58-3453-FA2D-BC49-F340348ACCE5}><C:\WINDOWS\system32\rsmyepm.dll> []
<{E418E9ED-9221-4661-B1F3-4AA35BD83832}><C:\Program Files\Internet Explorer\PLUGINS\WinSys88.Sys> [N/A]
<{28907901-1416-3389-9981-372178569982}><C:\WINDOWS\system32\kawdbzy.dll> []
<{2960356A-458E-DE24-BD50-268F589A56A2}><C:\WINDOWS\system32\avwlbmn.dll> []
<{2598FF45-DA60-F48A-BC43-10AC47853D52}><C:\WINDOWS\system32\rarjbpi.dll> []
<{2A321487-4977-D98A-C8D5-6488257545A2}><C:\WINDOWS\system32\kapjbzy.dll> []
<{4A1247C1-53DA-FF43-ABD3-345F323A48D4}><C:\WINDOWS\system32\avwgdmn.dll> []
<{3960356A-458E-DE24-BD50-268F589A56A3}><C:\WINDOWS\system32\avwlcmn.dll> []
<{09F8A0EB-ED61-4714-B0AD-7EAFF5361A8B}><C:\WINDOWS\system32\zhjtrx.dll> []
<{4859245F-345D-BC13-AC4F-145D47DA34F4}><C:\WINDOWS\system32\avzxdmn.dll> []