找到文件
C:\WINDOWS\system32\SafeAbc.exe
压缩，发送到我的邮箱：
571wind@163.com然后用附件的XDELBOX，删除文件
C:\WINDOWS\system32\lofscjbo.dll
C:\WINDOWS\system32\opshbbty.dll
C:\WINDOWS\system32\oohxcbyt.dll
C:\WINDOWS\system32\zxmscwin.dll
C:\WINDOWS\system32\zyzxhime.dll
C:\WINDOWS\system32\mpmydapi.dll
C:\WINDOWS\system32\pjjxcdwd.dll
C:\WINDOWS\system32\yxcschlp.dll
C:\WINDOWS\system32\lijzalit.dll
C:\WINDOWS\system32\ozfydbyt.dll
C:\WINDOWS\system32\mndscsrv.dll
C:\WINDOWS\system32\yxfhcjpg.dll
C:\WINDOWS\system32\zywmeime.dll
C:\WINDOWS\system32\zxptejpg.dll
C:\WINDOWS\system32\yzztgmsn.dll
C:\WINDOWS\system32\zptlbsys.dll
C:\WINDOWS\system32\skqnabib.dll
C:\WINDOWS\system32\mnmhdsrv.dll
C:\WINDOWS\system32\mpwdcapi.dll
C:\WINDOWS\system32\ptjhdhlp.dll
C:\WINDOWS\system32\apfobdet.dll
C:\WINDOWS\system32\apsgajba.dll
C:\WINDOWS\system32\ypcqfhlp.dll
C:\WINDOWS\system32\apzhbtde.dll
C:\WINDOWS\system32\SafeAbc.exe
C:\WINDOWS\system32\RavLoa.exe
从剪贴板导入，选择抑制再生，重起并删除
重起以后，
用SRENG
注册表
删除
<LoveHebeAA><C:\WINDOWS\system32\SafeAbc.exe> []
<RavLoa><C:\WINDOWS\system32\RavLoa.exe> []
<{370165F1-9F65-569F-F895-F14F58F41073}><C:\WINDOWS\system32\lofscjbo.dll> []
<{22596546-2036-9451-6058-658402589722}><C:\WINDOWS\system32\opshbbty.dll> []
<{4B1AEF69-DDAE-FDAD-DCAB-698F026ABDB4}><C:\WINDOWS\system32\oohxcbyt.dll> []
<{6A041F13-A111-12A3-B0CF-F99818AA68A6}><C:\WINDOWS\system32\zxmscwin.dll> []
<{8A59145F-315D-BC23-AC1F-145DF81A34A8}><C:\WINDOWS\system32\zyzxhime.dll> []
<{4629FF4F-ACDB-5C90-A098-FACB3456A264}><C:\WINDOWS\system32\mpmydapi.dll> []
<{34FAE856-AD58-20CB-A025-CD4895FA6E43}><C:\WINDOWS\system32\pjjxcdwd.dll> []
<{35671234-7890-ABCD-CDEF-567801237653}><C:\WINDOWS\system32\yxcschlp.dll> []
<{1C954872-1230-6541-9548-6541025884C1}><C:\WINDOWS\system32\lijzalit.dll> []
<{4A069845-2036-6084-9054-6087502480A4}><C:\WINDOWS\system32\ozfydbyt.dll> []
<{37FD640A-158F-48AC-FD14-1597F14A9773}><C:\WINDOWS\system32\mndscsrv.dll> []
<{83BA45AF-FAAA-CDDD-BEEE-BCDE1234AB38}><C:\WINDOWS\system32\yxfhcjpg.dll> []
<{5319A1F1-9410-9654-3201-345FFA349135}><C:\WINDOWS\system32\zywmeime.dll> []
<{91698482-6555-3666-1222-954784129019}><C:\WINDOWS\system32\zxptejpg.dll> []
<{7490415F-65F8-B5C5-D8BA-9405FB120547}><C:\WINDOWS\system32\yzztgmsn.dll> []
<{40940F85-F015-14F1-A05F-F69858AC6D04}><C:\WINDOWS\system32\zptlbsys.dll> []
<{12023698-6984-8541-9654-698745012521}><C:\WINDOWS\system32\skqnabib.dll> []
<{4C8D1401-A58D-A81C-CD24-A5915C4517C4}><C:\WINDOWS\system32\mnmhdsrv.dll> []
<{35694105-5108-9405-3695-954187462153}><C:\WINDOWS\system32\mpwdcapi.dll> []
<{428DF602-9541-A985-210A-984A698C6F24}><C:\WINDOWS\system32\ptjhdhlp.dll> []
<{2E035987-F585-68D1-AC28-98FA58E459E2}><C:\WINDOWS\system32\apfobdet.dll> []
<{1FD45A54-9875-698F-E56E-65102358FDF1}><C:\WINDOWS\system32\apsgajba.dll> []
<{70AF1289-F140-A140-D012-C1458759FC07}><C:\WINDOWS\system32\ypcqfhlp.dll> []
<{2D698451-2015-6358-9871-2015987452D2}><C:\WINDOWS\system32\apzhbtde.dll> []
删除服务
[Windows bmau RunThem / bmau][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\PROGRA~1\whvp\grfz.dll><>
驱动
禁止
[apcdli / apcdli][Running/Auto Start]
<\??\C:\Program Files\Microsoft Office\SYSTEM\apcdli.sys><N/A>
[lymhmuaj0 / lymhmuaj0m][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\lymhmuaj0m.sys><N/A>
[sfhqyp5 / sfhqyp5][Stopped/Boot Start]
<\SystemRoot\system32\drivers\sfhqyp5.sys><N/A>
删除浏览器加载
[]
{12023698-6984-8541-9654-698745012521} <C:\WINDOWS\system32\skqnabib.dll, N/A>
[]
{1C954872-1230-6541-9548-6541025884C1} <C:\WINDOWS\system32\lijzalit.dll, N/A>
[]
{1FD45A54-9875-698F-E56E-65102358FDF1} <C:\WINDOWS\system32\apsgajba.dll, N/A>
[]
{22596546-2036-9451-6058-658402589722} <C:\WINDOWS\system32\opshbbty.dll, N/A>
[]
{2D698451-2015-6358-9871-2015987452D2} <C:\WINDOWS\system32\apzhbtde.dll, N/A>
[]
{2E035987-F585-68D1-AC28-98FA58E459E2} <C:\WINDOWS\system32\apfobdet.dll, N/A>
[]
{34FAE856-AD58-20CB-A025-CD4895FA6E43} <C:\WINDOWS\system32\pjjxcdwd.dll, N/A>
[]
{35671234-7890-ABCD-CDEF-567801237653} <C:\WINDOWS\system32\yxcschlp.dll, N/A>
[]
{35694105-5108-9405-3695-954187462153} <C:\WINDOWS\system32\mpwdcapi.dll, N/A>
[]
{370165F1-9F65-569F-F895-F14F58F41073} <C:\WINDOWS\system32\lofscjbo.dll, N/A>
[]
{37FD640A-158F-48AC-FD14-1597F14A9773} <C:\WINDOWS\system32\mndscsrv.dll, N/A>
[]
{40940F85-F015-14F1-A05F-F69858AC6D04} <C:\WINDOWS\system32\zptlbsys.dll, N/A>
[]
{428DF602-9541-A985-210A-984A698C6F24} <C:\WINDOWS\system32\ptjhdhlp.dll, N/A>
[]
{4629FF4F-ACDB-5C90-A098-FACB3456A264} <C:\WINDOWS\system32\mpmydapi.dll, N/A>
[]
{4A069845-2036-6084-9054-6087502480A4} <C:\WINDOWS\system32\ozfydbyt.dll, N/A>
[]
{4B1AEF69-DDAE-FDAD-DCAB-698F026ABDB4} <C:\WINDOWS\system32\oohxcbyt.dll, N/A>
[]
{4C8D1401-A58D-A81C-CD24-A5915C4517C4} <C:\WINDOWS\system32\mnmhdsrv.dll, N/A>
[]
{5319A1F1-9410-9654-3201-345FFA349135} <C:\WINDOWS\system32\zywmeime.dll, N/A>
[]
{6A041F13-A111-12A3-B0CF-F99818AA68A6} <C:\WINDOWS\system32\zxmscwin.dll, N/A>
[]
{70AF1289-F140-A140-D012-C1458759FC07} <C:\WINDOWS\system32\ypcqfhlp.dll, N/A>
[]
{7490415F-65F8-B5C5-D8BA-9405FB120547} <C:\WINDOWS\system32\yzztgmsn.dll, N/A>
[]
{83BA45AF-FAAA-CDDD-BEEE-BCDE1234AB38} <C:\WINDOWS\system32\yxfhcjpg.dll, N/A>
[]
{8A59145F-315D-BC23-AC1F-145DF81A34A8} <C:\WINDOWS\system32\zyzxhime.dll, N/A>
[]
{91698482-6555-3666-1222-954784129019} <C:\WINDOWS\system32\zxptejpg.dll, N/A>
[Invoke Class]
{F19455F5-ADF4-4171-9111-3AF65819FE4B} <C:\WINDOWS\system32\2df1.dll, >
再用附件2 ，运行下，修复IFEO
最后：
下载arswp(Windows清理助手)清理下..
http://www.arswp.com/download/arswp/arswp.rar清理临时文件夹:
打开我的电脑-工具-文件夹选项-查看-显示隐藏文件-隐藏受保护的系统文件(勾去掉)-确定
重起进入安全模式(开机不停的按F8,选择安全模式启动) 清空下列临时文件夹中所有内容：
C:\Documents and Settings\用户名\Local Settings\Temporary Internet Files
C:\Documents and Settings\用户名\Local Settings\Temp
C:\WINDOWS\TEMP
安全卫士360下载：
http://www.skycn.com/soft/21730.html做下最后的清理，更新杀软，全盘杀毒
