这一步很重要：复制c:\windows\system32\dllcache\explorer.exe粘贴到c:\windows\文件夹下 提示替换选“是”没做好重起删除文件后会造成桌面只有背景 请一定在第一步做好
1.用XDelBox勾选抑制再生后删除以下文件：(
XDelBox1.7支持奥运版下载)
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择
从剪贴板导入不检查路径，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质（包括U盘，MP3，手机存储卡等）。
c:\windows\system32\msoscqit00.dll
c:\windows\system32\msoscqit01.dll
c:\windows\system32\msosdohs00.dll
c:\windows\system32\msosdohs01.dll
c:\windows\system32\msosfmsq00.dll
c:\windows\system32\msosping00.dll
c:\windows\system32\msoscqit01.dll
c:\windows\system32\msoscqit02.dll
c:\windows\system32\msosdohs01.dll
c:\windows\system32\msosdohs02.dll
c:\windows\system32\msosfmsq01.dll
c:\windows\system32\msosping01.dll
c:\windows\system32\msoscqit02.dll
c:\windows\system32\msoscqit00.dll
c:\windows\system32\msosdohs02.dll
c:\windows\system32\msosdohs00.dll
c:\windows\system32\msosfmsq02.dll
c:\windows\system32\msosping02.dll
c:\windows\system32\fgpsee.dll
c:\windows\system32\fmsiocps.dll
c:\windows\system32\fnhwe.dll
c:\windows\system32\fyrgtr.dll
c:\windows\system32\xgnfn.dll
c:\windows\system32\explorer.exe
c:\program files\internet explorer\iexplore32.dat
c:\program files\internet explorer\iexplore32.sys
c:\program files\internet explorer\iexplore32.win
c:\windows\system32\anistio.dll
c:\windows\system32\bincdwsa.dll
c:\windows\system32\cedafb.dll
c:\windows\system32\dbhlp32.dll
c:\windows\system32\dionpis.dll
c:\windows\system32\hefcndy.dll
c:\windows\system32\hfrdzx.dll
c:\windows\system32\hhrdxd.dll
c:\windows\system32\isndntio.dll
c:\windows\system32\jdsaex.dll
c:\windows\system32\jfrwdh.dll
c:\windows\system32\kdbkjt.dll
c:\windows\system32\sgrefg.dll
c:\windows\system32\winsvr64.dll
c:\windows\system32\sysdajhv.dll
c:\windows\system32\syszxac.dll
c:\windows\system32\wyhesm.dll
c:\windows\system32\wzcfsw.dll
c:\windows\system32\zgfdet.dll
c:\windows\system32\zgxfdx.dll
c:\windows\system32\zjydcx.dll
c:\windows\system32\oswxattb.dll
c:\windows\system32\pjjxcdwd.dll
c:\windows\system32\skqnbbib.dll
c:\windows\system32\cdwsbkop.dll
c:\windows\system32\lijzblit.dll
c:\windows\system32\yxcschlp.dll
c:\windows\system32\ypcqehlp.dll
c:\windows\system32\ptjhchlp.dll
c:\windows\system32\ypdjfbmp.dll
c:\windows\system32\mnmhcsrv.dll
c:\windows\system32\oohxcbyt.dll
c:\windows\system32\apsgajba.dll
c:\windows\system32\apzhbtde.dll
c:\windows\system32\yzztgmsn.dll
c:\windows\system32\zywmdime.dll
c:\windows\system32\mpwdcapi.dll
c:\windows\system32\mpmydapi.dll
c:\windows\system32\zptlcsys.dll
c:\windows\system32\mndhcdwd.dll
c:\program files\internet explorer\plugins\nt_sys32.sys
c:\windows\system32\yxcsbhlp.dll
c:\windows\system32\mndscsrv.dll
c:\windows\system32\mpmycapi.dll
c:\windows\system32\zptlbsys.dll
c:\windows\system32\ypcqchlp.dll
c:\windows\winsvr64.exe
c:\windows\isndntio.exe
c:\windows\bincdwsa.exe
c:\windows\ticisms.exe
c:\windows\ptshell.exe
c:\windows\bweoqbdz.exe
c:\windows\fmsjhif.exe
c:\windows\dbhlp32.exe
c:\windows\hefcndy.exe
c:\windows\dionpis.exe
c:\windows\anistio.exe
c:\windows\fmsiocps.exe
c:\docume~1\s\locals~1\temp\tmpe.tmp
c:\docume~1\s\locals~1\temp\tmp1a.tmp
c:\docume~1\s\locals~1\temp\tmp4.tmp
c:\windows\system32\drivers\msosmsp2p32.sys
c:\windows\system32\drivers\msosmsfpfis64.sys
c:\docume~1\s\locals~1\temp\tmp18.tmp
c:\docume~1\s\locals~1\temp\tmp4.tmp
c:\docume~1\s\locals~1\temp\tmpa.tmp
c:\docume~1\s\locals~1\temp\tmp6.tmp
c:\docume~1\s\locals~1\temp\tmp12.tmp
c:\windows\downlo~1\netsign.dll
c:\windows\vqqsdl10.dll
2.删除重启后使用SREng修复下面各项： 启动项目 －－ 注册表之如下项删除：
[{84143967-B645-4BFF-B873-DA1DC886E9A7}]
[{841529CB-7F77-4B99-A895-B5441E0D302F}]
[{28766E1C-74B0-4417-8C75-F12AE309EF35}]
[{8C41B7F7-3168-400D-A702-0E7EFE0BA304}]
[{6E6CA8A1-81BC-4707-A54C-F4903DD70BAD}]
[{6E6CA8A1-81BC-4707-A54C-F4903DD70BAD}]
[{28EB3777-3E23-4E72-8449-A992D09D24C3}]
[{EB71E0B3-E97D-4D30-8733-E28266467617}]
[{13512378-9874-5641-1025-985420368731}]
[{34FAE856-AD58-20CB-A025-CD4895FA6E43}]
[{22023698-6984-8541-9654-698745012522}]
[{2A095412-A568-B258-C587-D148E148F0A2}]
[{2C954872-1230-6541-9548-6541025884C2}]
[{1DB3C525-5271-46F7-887A-D4E1ADAA7632}]
[{35671234-7890-ABCD-CDEF-567801237653}]
[{60AF1289-F140-A140-D012-C1458759FC06}]
[{328DF602-9541-A985-210A-984A698C6F23}]
[{81954FAC-1023-154F-895A-1458258AD818}]
[{3C8D1401-A58D-A81C-CD24-A5915C4517C3}]
[{4B1AEF69-DDAE-FDAD-DCAB-698F026ABDB4}]
[{1FD45A54-9875-698F-E56E-65102358FDF1}]
[{2D698451-2015-6358-9871-2015987452D2}]
[{7490415F-65F8-B5C5-D8BA-9405FB120547}]
[{4319A1F1-9410-9654-3201-345FFA349134}]
[{35694105-5108-9405-3695-954187462153}]
[{4629FF4F-ACDB-5C90-A098-FACB3456A264}]
[{50940F85-F015-14F1-A05F-F69858AC6D05}]
[{3C648541-1025-9650-9057-6541258720C3}]
[{A45B2C37-01D0-4D3E-BE5E-CC119B17BE9E}]
[{EE12D60D-AD9A-4095-B839-3BE6862679FD}]
[{C5E87A05-F463-4841-B19E-DD3EC3862368}]
[{398C9B84-4EF7-47B5-9862-DE29543B3C42}]
[{25671234-7890-ABCD-CDEF-567801237652}]
[{37FD640A-158F-48AC-FD14-1597F14A9773}]
[{3629FF4F-ACDB-5C90-A098-FACB3456A263}]
[{40940F85-F015-14F1-A05F-F69858AC6D04}]
[{B29583D8-033A-4B9F-8553-7C5458F3FB8E}]
[{40AF1289-F140-A140-D012-C1458759FC04}]
[{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}]
[{45AADFAA-DD36-42AB-83AD-0521BBF58C24}]
注意该项[AppInit_DLLs]修改：把<fnhwe.dll,fyrgtr.dll,ghrst.dll,ethyg.dll,yuker.dll,gtujerg.dll,fydfgk.dll,ukrth.dll,fghdghu.dll,reger.dll,tynjder.dll,wefgh.dll,gfcfg.dll,frntrn.dll,qrhhb.dll,drghszd.dll,fngn.dll,gnfctt.dll,xgnfn.dll,xfgnhcgfm.dll,serger.dll,bnxnb.dll,fxgnfx.dll,jzijj.dll,xfgnfx.dll,serghjm.dll,thsddh.dll,xbcvxb.dll,zfdzb.dll,xdndn.dll,xdfntt.dll,hgfhk.dll,dnteh.dll,xfng.dll,njritc.dll,chmfcmh.dll,jwlah.dll,gmnait.dll,hfjg.dll,thurh.dll,mgmgmm.dll,oqrthc.dll,rhdhj.dll,jyjlt.dll,ijatnaw.dll,sehhter.dll,fhjfg.dll,zdbdb.dll,ydgn.dll,dbfb.dll,fjnbv.dll,thrtgth.dll,setrhes.dll,cdxbfxdb.dll,xfgnxfn.dll,gjkhj.dll,xdhdg.dll,rhs.dll,mrjhtjd.dll,zdbfbd.dll,fjyjy.dll,fxnfnh.dll,bjrvm.dll,ektvm.dll,rdthr.dll,yjrfe.dll,dscef.dll,crugd.dll,lariytrz.dll,hjaiq.dll,kduy.dll,hkfgh.dll,awef.dll,dfhsh.dll,ethsh.dll,stehs.dll,sthth.dll,wfhyt.dll,rgghjj.dll,ghjkdr.dll,hfther.dll,,msosdohs01.dll,fgpsee.dll,msosping00.dll,fmsiocps.dll,kdbkjt.dll>修改为<>即清空
[WINSvr64]
[isndntio]
[bincdwsa]
[ticisms]
[ptshell]
[jbzwqeoo]
[fmsjhif]
[dbhlp32]
[hefcndy]
[dionpis]
[anistio]
[fmsiocps]
启动项目 －－ 服务－－ 驱动程序之如下项删除：
[zftp / zftp]
[ptfs / ptfs]
[ping / ping]
[msp2p32 / msp2p32]
[msfpfis64 / msfpfis64]
[mnsf / mnsf]
[mhfp / mhfp]
[fmsq / fmsq]
[dohs / dohs]
[cqit / cqit]
系统修复－－ 浏览器加载项之如下项删除：
[] <C:\Program Files\Internet Explorer\IEXPLORE32.Dat>
[] <C:\Program Files\Internet Explorer\IEXPLORE32.Sys>
[] <C:\Program Files\Internet Explorer\IEXPLORE32.win>
[] <C:\WINDOWS\System32\ypdjfbmp.dll>
[] <C:\WINDOWS\System32\yzztgmsn.dll>
[] <C:\WINDOWS\System32\ypcqehlp.dll>
[] <C:\WINDOWS\System32\zptlcsys.dll>
[] <C:\WINDOWS\System32\oohxcbyt.dll>
[] <C:\WINDOWS\System32\mpmydapi.dll>
[] <C:\WINDOWS\System32\zywmdime.dll>
[] <C:\WINDOWS\System32\ypcqchlp.dll>
[] <C:\WINDOWS\System32\zptlbsys.dll>
[] <C:\WINDOWS\System32\mnmhcsrv.dll>
[] <C:\WINDOWS\System32\mndhcdwd.dll>
[] <C:\Program Files\Internet Explorer\PLUGINS\Nt_Sys32.Sys>
[] <C:\WINDOWS\System32\mndscsrv.dll>
[] <C:\WINDOWS\System32\mpmycapi.dll>
[] <C:\WINDOWS\System32\mpwdcapi.dll>
[] <C:\WINDOWS\System32\yxcschlp.dll>
[] <C:\WINDOWS\System32\pjjxcdwd.dll>
[] <C:\WINDOWS\System32\ptjhchlp.dll>
[] <C:\WINDOWS\System32\apzhbtde.dll>
[] <C:\WINDOWS\System32\lijzblit.dll>
[] <C:\WINDOWS\System32\cdwsbkop.dll>
[] <C:\WINDOWS\System32\yxcsbhlp.dll>
[] <C:\WINDOWS\System32\skqnbbib.dll>
[] <C:\WINDOWS\System32\apsgajba.dll>
[] <C:\WINDOWS\System32\oswxattb.dll>
[InfoSecNetSign Class] <C:\WINDOWS\DOWNLO~1\NetSign.dll>
[VqqSpeedDlProxy Class] <C:\WINDOWS\vqqsdl10.dll>
做完后下载以下软件清理一次并更新杀毒软件至最新进行全盘杀毒
清理系统临时文件和IE临时文件夹
http://www.atribune.org/public-beta/ATF-Cleaner.exe 用金山清理专家清理恶意软件
http://www.duba.net/zt/ksc/down.shtml 下载 windows清理助手清理一遍
http://www.arswp.com/download/arswp2/arswp2.zip另外：建议将c:\windows\System32\DRIVERS\eps2kt1.sys文件上网站检测
http://www.virscan.org
