注意：删除病毒可能会具有一定的危险性 所以强烈建议操作前要把重要资料转移至非系统分区！
打开sreng
启动项目 注册表 删除如下项目
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><WinSysms_1.dll> []清空此项
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{14909874-8982-F344-A322-7898787FA741}><C:\WINDOWS\system32\swjqazc.dll> [N/A]
<{B158698F-435B-CD34-FA34-59875412025B}><\\.\c:\com1\com2.dll> []
<{24783410-4F90-34A0-7820-3230ACD05F42}><C:\WINDOWS\system32\raqjbpi.dll> [N/A]
<{18847374-8323-FADC-B443-4732ABCD3781}><C:\WINDOWS\system32\sidjazy.dll> [N/A]
<{5B681598-AD5F-BC8C-77DC-748FAC8D3FB5}><C:\WINDOWS\system32\kafyezy.dll> [N/A]
<{39659854-7415-1025-5982-789541250193}><C:\WINDOWS\system32\SysWln74_3.dll> [N/A]
<{3C87A354-ABC3-DEDE-FF33-3213FD7447C3}><C:\WINDOWS\system32\kvdxcma.dll> [N/A]
<{5D47B341-43DF-4563-753F-345FFA3157D5}><C:\WINDOWS\system32\kvmxema.dll> [N/A]
<{5E32FA58-3453-FA2D-BC49-F340348ACCE5}><C:\WINDOWS\system32\rsmyepm.dll> [N/A]
<{2960356A-458E-DE24-BD50-268F589A56A2}><C:\WINDOWS\system32\avwlbmn.dll> [N/A]
<{2A321487-4977-D98A-C8D5-6488257545A2}><C:\WINDOWS\system32\kapjbzy.dll> [N/A]
<{28907901-1416-3389-9981-372178569982}><C:\WINDOWS\system32\kawdbzy.dll> [N/A]
<{67D81718-1314-5200-2597-587901018076}><C:\WINDOWS\system32\kaqhfzy.dll> [N/A]
<{49659854-7415-1025-5982-789541250194}><C:\WINDOWS\system32\NinSys74_1.dll> [N/A]
<{3D561258-45F3-A451-F908-A258458226D3}><C:\WINDOWS\system32\kvdxscma.dll> [N/A]
<{4C87A354-ABC3-DEDE-FF33-3213FD7447C4}><C:\WINDOWS\system32\kvdxdma.dll> [N/A]
<{4D561258-45F3-A451-F908-A258458226D4}><C:\WINDOWS\system32\kvdxsdma.dll> [N/A]
<{6C87A354-ABC3-DEDE-FF33-3213FD7447C6}><C:\WINDOWS\system32\kvdxfma.dll> [N/A]
<{59659854-7415-1025-5982-789541250195}><C:\WINDOWS\system32\WinSysms_1.dll> []
<{69659854-7415-1025-5982-789541250196}><C:\WINDOWS\system32\WinSysms_2.dll> [N/A]
<{5859245F-345D-BC13-AC4F-145D47DA34F5}><C:\WINDOWS\system32\avzxemn.dll> [N/A]
<{28847374-8323-FADC-B443-4732ABCD3782}><C:\WINDOWS\system32\sidjbzy.dll> [N/A]
<{5A1247C1-53DA-FF43-ABD3-345F323A48D5}><C:\WINDOWS\system32\avwgemn.dll> [N/A]
用SRENG扫描工具删除以下驱动程序
[1785171 / 1785171][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\Drivers\1785140.sys><N/A>
[388515 / 388515][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\Drivers\388484.sys><N/A>
重启计算机进入安全模式下删除
<{14909874-8982-F344-A322-7898787FA741}><C:\WINDOWS\system32\swjqazc.dll> [N/A]
<{B158698F-435B-CD34-FA34-59875412025B}><\\.\c:\com1\com2.dll> []
<{24783410-4F90-34A0-7820-3230ACD05F42}><C:\WINDOWS\system32\raqjbpi.dll> [N/A]
<{18847374-8323-FADC-B443-4732ABCD3781}><C:\WINDOWS\system32\sidjazy.dll> [N/A]
<{5B681598-AD5F-BC8C-77DC-748FAC8D3FB5}><C:\WINDOWS\system32\kafyezy.dll> [N/A]
<{39659854-7415-1025-5982-789541250193}><C:\WINDOWS\system32\SysWln74_3.dll> [N/A]
<{3C87A354-ABC3-DEDE-FF33-3213FD7447C3}><C:\WINDOWS\system32\kvdxcma.dll> [N/A]
<{5D47B341-43DF-4563-753F-345FFA3157D5}><C:\WINDOWS\system32\kvmxema.dll> [N/A]
<{5E32FA58-3453-FA2D-BC49-F340348ACCE5}><C:\WINDOWS\system32\rsmyepm.dll> [N/A]
<{2960356A-458E-DE24-BD50-268F589A56A2}><C:\WINDOWS\system32\avwlbmn.dll> [N/A]
<{2A321487-4977-D98A-C8D5-6488257545A2}><C:\WINDOWS\system32\kapjbzy.dll> [N/A]
<{28907901-1416-3389-9981-372178569982}><C:\WINDOWS\system32\kawdbzy.dll> [N/A]
<{67D81718-1314-5200-2597-587901018076}><C:\WINDOWS\system32\kaqhfzy.dll> [N/A]
<{49659854-7415-1025-5982-789541250194}><C:\WINDOWS\system32\NinSys74_1.dll> [N/A]
<{3D561258-45F3-A451-F908-A258458226D3}><C:\WINDOWS\system32\kvdxscma.dll> [N/A]
<{4C87A354-ABC3-DEDE-FF33-3213FD7447C4}><C:\WINDOWS\system32\kvdxdma.dll> [N/A]
<{4D561258-45F3-A451-F908-A258458226D4}><C:\WINDOWS\system32\kvdxsdma.dll> [N/A]
<{6C87A354-ABC3-DEDE-FF33-3213FD7447C6}><C:\WINDOWS\system32\kvdxfma.dll> [N/A]
<{59659854-7415-1025-5982-789541250195}><C:\WINDOWS\system32\WinSysms_1.dll> []
<{69659854-7415-1025-5982-789541250196}><C:\WINDOWS\system32\WinSysms_2.dll> [N/A]
<{5859245F-345D-BC13-AC4F-145D47DA34F5}><C:\WINDOWS\system32\avzxemn.dll> [N/A]
<{28847374-8323-FADC-B443-4732ABCD3782}><C:\WINDOWS\system32\sidjbzy.dll> [N/A]
<{5A1247C1-53DA-FF43-ABD3-345F323A48D5}><C:\WINDOWS\system32\avwgemn.dll> [N/A]
<\??\C:\WINDOWS\system32\Drivers\1785140.sys><N/A>
<\??\C:\WINDOWS\system32\Drivers\388484.sys><N/A>
如果有文件删除不掉，使用此工具：
XDelbox1.5删除工具: http://www.i170.com/attach/97670969-F47C-4A8B-9529-F0F602EFA902
