用SRENG把这项置空：[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><kawdczy.dll> []
就是去掉那个DLL
用SRENG删除启动项：
<{8C87A354-ABC3-DEDE-FF33-3213FD7447C8}><C:\WINDOWS\system32\kvdxhma.dll> []
<{38907901-1416-3389-9981-372178569983}><C:\WINDOWS\system32\kawdczy.dll> []
<{97D81718-1314-5200-2597-587901018079}><C:\WINDOWS\system32\kaqhizy.dll> []
<{44783410-4F90-34A0-7820-3230ACD05F44}><C:\WINDOWS\system32\raqjdpi.dll> [N/A]
<{5859245F-345D-BC13-AC4F-145D47DA34F5}><C:\WINDOWS\system32\avzxemn.dll> [N/A]
<{6D561258-45F3-A451-F908-A258458226D6}><C:\WINDOWS\system32\kvdxsfma.dll> [N/A]
<{4A321487-4977-D98A-C8D5-6488257545A4}><C:\WINDOWS\system32\kapjdzy.dll> [N/A]
<{38847374-8323-FADC-B443-4732ABCD3783}><C:\WINDOWS\system32\sidjczy.dll> [N/A]
<{5A1247C1-53DA-FF43-ABD3-345F323A48D5}><C:\WINDOWS\system32\avwgemn.dll> [N/A]
<{4598FF45-DA60-F48A-BC43-10AC47853D54}><C:\WINDOWS\system32\rarjdpi.dll> []
用冰刃删除文件：
[C:\WINDOWS\system32\kvdxhma.dll]
C:\WINDOWS\system32\kawdczy.dll
C:\WINDOWS\system32\rarjdpi.dll>
C:\WINDOWS\system32\avwgemn.dll
C:\WINDOWS\system32\kawdczy.dll
C:\WINDOWS\system32\kaqhizy.dll
C:\WINDOWS\system32\raqjdpi.dll>
C:\WINDOWS\system32\avzxemn.dll
C:\WINDOWS\system32\kvdxsfma.dll
C:\WINDOWS\system32\kapjdzy.dll
C:\WINDOWS\system32\sidjczy.dll
最后用windows清理助手清理下系统
