1.建议使用XDelBox删除以下文件:(
XDelBox1.6下载)
使用说明:删除时复制所有要删除文件的路径,在待删除文件列表里点击右键选择从剪贴板导入,导入后在要删除文件上点击右键,选择立刻重启删除,电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质(包括U盘,MP3,手机存储卡等)。
c:\windows\fonts\jsqxbyc.dll
c:\windows\fonts\swjqezc.dll
c:\program files\internet explorer\plugins\wn_sys8x.sys
c:\windows\system32\gjcscyc.dll
c:\windows\fonts\raqjmpi.dll
c:\windows\fonts\rarjfpi.dll
c:\windows\fonts\avzxomn.dll
c:\windows\winform.exe
c:\windows\ptsshell.exe
c:\windows\lotushlp.exe
c:\windows\shaproc.exe
c:\windows\dbghlp32.exe
c:\windows\nvdispdrv.exe
c:\windows\upxdnd.exe
c:\windows\fonts\syn00-e0-4c-7a-cb-3d\system\1a.exe
c:\windows\fonts\syn44-45-53-54-42-00\system\smss.exe
c:\progra~1\yahoo!\assist~1\ylive.exe
c:\program files\yahoo!\assistant\yassistse.exe
c:\progra~1\yahoo!\assist~1\yalive.dll
c:\progra~1\yahoo!\assist~1\ylive.exe
c:\windows\system32\drivers\msaclue.sys
c:\windows\system32\drivers\msacpe.sys
c:\windows\system32\drivers\erjksjfz.sys
c:\progra~1\yahoo!\assist~1\assist\yasbar.dll/203
c:\progra~1\yahoo!\assist~1\assist\yrss.dll/yrssmenuext
c:\progra~1\yahoo!\assist~1\assist\yasbar.dll
c:\program files\yahoo!\assistant\assist\yphtb.dll
c:\progra~1\yahoo!\assist~1\assist\yangling.dll
c:\program files\yahoo!\assistant\yalive.dll
c:\progra~1\yahoo!\assist~1\assist\ydrags~1.dll
c:\progra~1\yahoo!\assist~1\assist\yflashdl.dll
c:\progra~1\yahoo!\assist~1\assist\yassist.dll
c:\docume~1\admini~1\locals~1\temp\nsi12.tmp\ns13.tmp
c:\windows\fonts\syn00-e0-4c-7a-cb-3d\system\inudhya.dll
c:\progra~1\yahoo!\assist~1\assist\ywiper.dll
c:\progra~1\yahoo!\assist~1\yalive.dll
c:\progra~1\yahoo!\assist~1\yalliveex.dll
c:\progra~1\yahoo!\assist~1\yhelper.dll
c:\windows\system32\nvdispdrv.dll
c:\windows\system32\lotushlp.dll
c:\windows\system32\ptsshell.dll
c:\windows\system32\shaproc.dll
c:\windows\system32\upxdnd.dll
c:\windows\system32\winform.dll
c:\windows\system32\dbghlp32.dll
c:\windows\system32\nypqcw.dll
c:\program files\yahoo!\assistant\ynotifier.dll
c:\program files\yahoo!\assistant\shell\yasmenu.dll
c:\program files\yahoo!\assistant\shell\yassecblk.dll
c:\program files\yahoo!\assistant\shell\yieangel.dll
c:\program files\yahoo!\assistant\shell\ymenuinfo.dll
c:\windows\system32\ijougiemnaw.dll
c:\windows\system32\niluw.dll
c:\windows\system32\oqnauhc.dll
c:\windows\system32\uohsom.dll
c:\progra~1\yahoo!\assist~1\assist\yasfsks.dll
c:\progra~1\yahoo!\assist~1\assist\yasiesec.dll
c:\progra~1\yahoo!\assist~1\assist\yasnoad.dll
c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll
c:\progra~1\yahoo!\assist~1\assist\yoptimum.dll
c:\progra~1\yahoo!\assist~1\assist\yrepair.dll
c:\progra~1\yahoo!\assist~1\assist\yrss.dll
c:\progra~1\yahoo!\assist~1\assist\ysearch.dll
c:\progra~1\yahoo!\assist~1\assist\ysetti~1.dll
c:\progra~1\yahoo!\assist~1\assist\yxpstyle.dll
c:\progra~1\yahoo!\assist~1\assist\yzsnetproto.dll
c:\progra~1\yahoo!\assist~1\yscrblock.dll
c:\progra~1\yahoo!\assistant\shell\yassecblk.dll
c:\program files\yahoo!\assistant\assist\ymailp.dll
c:\program files\yahoo!\assistant\assist\ymyweb.dll
c:\program files\yahoo!\assistant\assist\ypagetr.dll
c:\docume~1\admini~1\locals~1\temp\nsi12.tmp\nsexec.dll
c:\docume~1\admini~1\locals~1\temp\nsi12.tmp\nsisarray.dll
c:\docume~1\admini~1\locals~1\temp\flashplayerupdate.exe
c:\windows\system32\macromed\flash\flash9e.ocx
2.删除重启后使用SREng修复下面各项:
启动项目 -- 注册表之如下项删除:
[{2D098345-9012-8750-8910-9128098134D2}] <C:\WINDOWS\Fonts\jsqxbyc.dll>
[{54909874-8982-F344-A322-7898787FA745}] <C:\WINDOWS\Fonts\swjqezc.dll>
[{9963387B-212E-4643-B207-82DAEA0E713D}] <C:\Program Files\Internet Explorer\PLUGINS\Wn_Sys8x.Sys>
[{3FA10261-B890-F432-A453-69F1023513F3}] <C:\WINDOWS\system32\gjcscyc.dll>
[{D4783410-4F90-34A0-7820-3230ACD05F4D}] <C:\WINDOWS\Fonts\raqjmpi.dll>
[{6598FF45-DA60-F48A-BC43-10AC47853D56}] <C:\WINDOWS\Fonts\rarjfpi.dll>
[{F859245F-345D-BC13-AC4F-145D47DA34FF}] <C:\WINDOWS\Fonts\avzxomn.dll>
[WinForm] <C:\WINDOWS\WinForm.exE>
[PTSShell] <C:\WINDOWS\PTSShell.exe>
[LotusHlp] <C:\WINDOWS\LotusHlp.exe>
[SHAProc] <C:\WINDOWS\SHAProc.exe>
[DbgHlp32] <C:\WINDOWS\DbgHlp32.exe>
[NVDispDrv] <C:\WINDOWS\NVDispDRV.EXE>
[upxdnd] <C:\WINDOWS\upxdnd.exe>
[inudhya] <C:\WINDOWS\Fonts\syn00-E0-4C-7A-CB-3D\system\1a.exe>
[TBMonEx] <C:\WINDOWS\Fonts\syn44-45-53-54-42-00\system\smss.exe>
[YLive.exe] <C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe>
[yassistse] <c:\program files\yahoo!\assistant\yassistse.exe>
[YahooC:\PROGRA~1\Yahoo!\ASSIST~1\yalive.dll472000] <regsvr32 /s C:\PROGRA~1\Yahoo!\ASSIST~1\yalive.dll>
[YahooC:\PROGRA~1\Yahoo!\ASSIST~1\ylive.exe473375] <regsvr32 /s C:\PROGRA~1\Yahoo!\ASSIST~1\ylive.exe>
**删除注册表名前带IFEO的全部项**
启动项目 -- 服务-- 驱动程序之如下项禁用:
[msskye / msskye] <system32\DRIVERS\msaclue.sys>
[mseqsy / mseqsy] <system32\DRIVERS\msacpe.sys>
[erjksjfz / erjksjfz] <\SystemRoot\System32\DRIVERS\erjksjfz.sys>
系统修复-- 浏览器加载项之如下项删除:
[雅虎搜索] <res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll/203>
[添加到雅虎订阅(&Y)] <res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll/YRSSMENUEXT>
[] <C:\Program Files\Internet Explorer\PLUGINS\Wn_Sys8x.Sys>
[雅虎助手] <http://cn.zs.yahoo.com/start.htm?source=yzs_icon&btn=yassistnew>
[] <C:\Program Files\Internet Explorer\PLUGINS\Wn_Sys8x.Sys>
[雅虎助手] <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll>
[Yahoo!Photo] <C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll>
[AntiFish Class] <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll>
[雅虎助手] <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll>
[Yahoo!Live] <C:\Program Files\Yahoo!\Assistant\yaLive.dll>
[DragSearch BHO] <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL>
[Yahoo!Photo] <C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll>
[AntiFish Class] <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll>
[DragSearch BHO] <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL>
[yFlashDl Class] <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yflashdl.dll>
[assist] <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yassist.dll>
[yFlashDl Class] <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yflashdl.dll>
[assist] <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yassist.dll>
4,更新杀毒软件至最新,进行全盘杀毒