1.建议使用XDelBox删除以下文件:(
XDelBox1.6下载)
使用说明:删除时复制所有要删除文件的路径,在待删除文件列表里点击右键选择从剪贴板导入,导入后在要删除文件上点击右键,选择立刻重启删除,电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质(包括U盘,MP3,手机存储卡等)。
c:\windows\system32\hfjg.dll
c:\windows\system32\msepbe.dll
c:\windows\system32\crugd.dll
c:\windows\system32\cedafb.dll
c:\windows\system32\d3d9_32.dll
c:\windows\system32\dbghlp32.dll
c:\windows\system32\hhrdxd.dll
c:\windows\system32\jfrwdh.dll
c:\windows\system32\jhrcar.dll
c:\windows\system32\ttdabdab1058.dll
c:\windows\system32\ttkafkaf1059.dll
c:\windows\system32\ttnnbnnb1047.dll
c:\windows\system32\ttsadsad1034.dll
c:\windows\system32\ttvufvuf1011.dll
c:\windows\system32\wrqszl.dll
c:\windows\system32\wsockdrv32.dll
c:\windows\system32\zgfdet.dll
c:\windows\system32\zgxfdx.dll
c:\windows\system32\zjydcx.dll
c:\windows\system32\sgrefg.dll
c:\windows\system32\sysloader.dll
c:\windows\system32\syswowa8.dll
txmhxmhx1013.dll
c:\windows\system32\fmcvxy.dll
ttabcabc1020.dll
c:\windows\system32\fedadh.dll
c:\windows\system32\pedadt.dll
ttfkkfkk1056.dll
c:\windows\system32\wyhesm.dll
wfhyt.dll,kghk.dll,ethsh.dll,stehs.dll,sthth.dll,frntrn.dll,qrhhb.dll,drghszd.dll,fngn.dll,gjjte.dll,xgnfn.dll,xfgnhcgfm.dll,serger.dll,bnxnb.dll,fxgnfx.dll,jzijj.dll,xfgnfx.dll,serghjm.dll,thsddh.dll,xbcvxb.dll,zfdzb.dll,xdndn.dll,xdfntt.dll,hgfhk.dll,dnteh.dll,xfng.dll,njritc.dll,chmfcmh.dll,jwlah.dll,gmnait.dll,hfjg.dll,thurh.dll,mgmgmm.dll,oqrthc.dll,fehom.dll,jyjlt.dll,ijatnaw.dll,sehhter.dll,fhjfg.dll,zdbdb.dll,ydgn.dll,dbfb.dll,fjnbv.dll,wmsat.dll,setrhes.dll,cdxbfxdb.dll,xfgnxfn.dll,gjkhj.dll,xdhdg.dll,rhs.dll,mrjhtjd.dll,zdbfbd.dll,fjyjy.dll,fxnfnh.dll,bjrvm.dll,ektvm.dll,rdthr.dll,rgfjj.dll,dscef.dll,crugd.dll,lariytrz.dll,hjaiq.dll,kduy.dll,hkfgh.dll,awef.dll,dfhsh.dll,msepbe.dll,
lyloadqr.exe
lyloadhr.exe
lyloadmr.exe
lyloadar.exe
lyloador.exe
lyleador.exe
lyloadbr.exe
dxdlg.exe
c:\windows\dbghlp32.exe
c:\windows\wsockdrv32.exe
c:\windows\system32\drivers\acpidisk.sys
c:\docume~1\admini~1\locals~1\temp\tmp1.tmp
c:\windows\system32\drivers\msosmsfpfis64.sys
c:\program files\common files\cpush\cpush.dll
2.删除重启后使用SREng修复下面各项: 启动项目 -- 注册表之如下项删除:
[{45AADFAA-DD36-42AB-83AD-0521BBF58C24}] <C:\WINDOWS\system32\zjydcx.dll>
[{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}] <C:\WINDOWS\system32\hhrdxd.dll>
[{29fab913-d0cd-477b-a3f0-3d7c3a90379b}] <C:\WINDOWS\system32\ttVUFVUF1011.dll>
[{CAED0F3B-DF8B-4DBF-BB20-8DFBC3199068}] <C:\WINDOWS\system32\jhrcar.dll>
[{3171a1d3-76ea-4dd0-b4ed-fe6da4e445a4}] <C:\WINDOWS\system32\ttDABDAB1058.dll>
[{F99DEFDD-200B-4410-B572-E90883D527D2}] <C:\WINDOWS\system32\wrqszl.dll>
[{3990c65a-0450-4f83-a377-776813244054}] <C:\WINDOWS\system32\ttKAFKAF1059.dll>
[{84143967-B645-4BFF-B873-DA1DC886E9A7}] <C:\WINDOWS\system32\cedafb.dll>
[{c60a2c71-1fef-4427-b738-ddcc8dbaf0b9}] <C:\WINDOWS\system32\ttSADSAD1034.dll>
[{6e554f33-95e1-489c-918f-c1f8ee38002b}] <txMHXMHX1013.dll>
[{73AE86E6-7F03-4C3B-8980-FB1DA157D3C7}] <C:\WINDOWS\system32\fmcvxy.dll>
[{566a4ae7-367c-48e9-95d7-cb42bd36636c}] <ttABCABC1020.dll>
[{27D89EDA-2197-4DFC-B3DC-AF22C6CA23BB}] <C:\WINDOWS\system32\fedadh.dll>
[{1DB3C525-5271-46F7-887A-D4E1ADAA7632}] <>
[{c4bf46a2-1c05-427d-992f-4e24f7d57f68}] <C:\WINDOWS\system32\ttNNBNNB1047.dll>
[{c4bf46a2-1c05-427d-992f-4e24f7d57f68}] <C:\WINDOWS\system32\ttNNBNNB1047.dll>
[{5E907A48-400E-4EA8-9792-FFAE052D59E9}] <C:\WINDOWS\system32\pedadt.dll>
[{5072c542-54dd-4f68-851c-8c717ab6cdea}] <ttFKKFKK1056.dll>
[{EB71E0B3-E97D-4D30-8733-E28266467617}] <C:\WINDOWS\system32\wyhesm.dll>
[{8C41B7F7-3168-400D-A702-0E7EFE0BA304}] <C:\WINDOWS\system32\sgrefg.dll>
[{6E6CA8A1-81BC-4707-A54C-F4903DD70BAD}] <C:\WINDOWS\system32\zgxfdx.dll>
[{841529CB-7F77-4B99-A895-B5441E0D302F}] <C:\WINDOWS\system32\jfrwdh.dll>
[{28EB3777-3E23-4E72-8449-A992D09D24C3}] <C:\WINDOWS\system32\zgfdet.dll>
注意该项[AppInit_DLLs]修改:把<wfhyt.dll,kghk.dll,ethsh.dll,stehs.dll,sthth.dll,frntrn.dll,qrhhb.dll,drghszd.dll,fngn.dll,gjjte.dll,xgnfn.dll,xfgnhcgfm.dll,serger.dll,bnxnb.dll,fxgnfx.dll,jzijj.dll,xfgnfx.dll,serghjm.dll,thsddh.dll,xbcvxb.dll,zfdzb.dll,xdndn.dll,xdfntt.dll,hgfhk.dll,dnteh.dll,xfng.dll,njritc.dll,chmfcmh.dll,jwlah.dll,gmnait.dll,hfjg.dll,thurh.dll,mgmgmm.dll,oqrthc.dll,fehom.dll,jyjlt.dll,ijatnaw.dll,sehhter.dll,fhjfg.dll,zdbdb.dll,ydgn.dll,dbfb.dll,fjnbv.dll,wmsat.dll,setrhes.dll,cdxbfxdb.dll,xfgnxfn.dll,gjkhj.dll,xdhdg.dll,rhs.dll,mrjhtjd.dll,zdbfbd.dll,fjyjy.dll,fxnfnh.dll,bjrvm.dll,ektvm.dll,rdthr.dll,rgfjj.dll,dscef.dll,crugd.dll,lariytrz.dll,hjaiq.dll,kduy.dll,hkfgh.dll,awef.dll,dfhsh.dll,msepbe.dll,>修改为<>即清空
[MSDQG32] <LYLoadqr.exe>
[MSDHG32] <LYLoadhr.exe>
[MSDMG32] <LYLoadmr.exe>
[MSDSG32] <LYLoadar.exe>
[MSDOG32] <LYLoador.exe>
[MSDCG32 ] <LYLeador.exe>
[MSDWG32] <LYLoadbr.exe>
[DXDLG32] <DXDLG.exe>
[DbgHlp32] <C:\WINDOWS\DbgHlp32.exe>
[WSockDrv32] <C:\WINDOWS\WSockDrv32.exe>
启动项目 -- 服务-- 驱动程序之如下项禁用:
[acpidisk / acpidisk] <\??\C:\WINDOWS\system32\drivers\acpidisk.sys>
[ping / ping] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp1.tmp>
[msfpfis64 / msfpfis64] <\??\C:\WINDOWS\system32\drivers\msosmsfpfis64.sys>
系统修复-- 浏览器加载项之如下项删除:
[CAdLogic
Object] <C:\Program Files\Common Files\CPUSH\cpush.dll>