1.这里官网下载费尔木马强力清除助手,勾选“清除,并抑制文件再次生成”后删除以下文件:(不管文件是否存在,删一次没坏处,如果提示文件不存在,不管他,直接继续下面的修复)。
http://dl.filseclab.com/down/powerrmv.zipc:\docume~1\admini~1\locals~1\temp\nsob.tmp\nsc.tmp
c:\windows\system32\arjrbler.dll
c:\windows\system32\asfjthj.dll
c:\windows\system32\hmsdvf.dll
c:\windows\system32\njritc.dll
c:\windows\system32\xfgnfx.dll
c:\windows\system32\xfgnxfn.dll
c:\windows\temp\wmsetup.dll
c:\windows\system32\hhrdxd.dll
c:\windows\system32\mndsgsrv.dll
c:\windows\system32\mpmyfapi.dll
c:\windows\system32\rijxbkin.dll
c:\windows\apppatch\jview.dll
c:\windows\system32\zxmscwin.dll
c:\windows\system32\tisqatyu.dll
c:\windows\system32\mndhfdwd.dll
c:\windows\system32\apsgfjba.dll
c:\windows\system32\tdggrz.dll
c:\windows\system32\oswxdttb.dll
c:\windows\system32\yxcschlp.dll
c:\windows\system32\mpwddapi.dll
c:\windows\system32\lijzclit.dll
c:\windows\system32\pjjxedwd.dll
c:\windows\system32\lassaplo.dll
c:\windows\system32\tfsdmz.dll
c:\windows\system32\ptjhehlp.dll
c:\windows\system32\fsrgeb.dll
c:\windows\system32\ddserh.dll
c:\windows\system32\mpmydapi.dll
c:\windows\system32\zywmgime.dll
c:\windows\system32\wyrsdj.dll
c:\windows\system32\apsgejba.dll
c:\windows\system32\nhmxcjkl.dll
c:\windows\system32\skqncbib.dll
c:\windows\system32\yzztimsn.dll
c:\windows\system32\zptlcsys.dll
c:\windows\system32\pedadt.dll
c:\windows\system32\zywmfime.dll
c:\windows\system32\ypdjgbmp.dll
c:\windows\system32\apsgdjba.dll
c:\windows\system32\yxfhcjpg.dll
c:\windows\system32\opshbbty.dll
c:\windows\system32\ozfyebyt.dll
c:\windows\system32\swsxachu.dll
c:\windows\system32\mnmhgsrv.dll
c:\windows\temp\killrs.sys
c:\windows\system32\drivers\nvmini.sys
2.删除重启后使用SREng修复下面各项: 启动项目 -- 注册表之如下项删除:
[JavaView]
[{6A041F13-A111-12A3-B0CF-F99818AA68A6}]
[{77FD640A-158F-48AC-FD14-1597F14A9777}]
[{18093456-9012-4568-9076-908765467181}]
[{6629FF4F-ACDB-5C90-A098-FACB3456A266}]
[{6C648541-1025-9650-9057-6541258720C6}]
[{6FD45A54-9875-698F-E56E-65102358FDF6}]
[{4C69034A-F45F-D34D-A33A-C33C4D324FC4}]
[{4D165A2A-4BC1-4CA8-8299-08E05AAAB5A4}]
[{43512378-9874-5641-1025-985420368734}]
[{35671234-7890-ABCD-CDEF-567801237653}]
[{45694105-5108-9405-3695-954187462154}]
[{3C954872-1230-6541-9548-6541025884C3}]
[{54FAE856-AD58-20CB-A025-CD4895FA6E45}]
[{2B69874A-C58C-458D-69F0-698F874E41B2}]
[{875E07B1-0614-43D9-A76E-D76A28AB3D7B}]
[{528DF602-9541-A985-210A-984A698C6F25}]
[{EA5D4B0E-B8CE-4761-8C7E-5D26369F0EC6}]
[{A9895933-6636-4281-BC58-EE6DE2AF96E3}]
[{4629FF4F-ACDB-5C90-A098-FACB3456A264}]
[{4629FF4F-ACDB-5C90-A098-FACB3456A264}]
[{7319A1F1-9410-9654-3201-345FFA349137}]
[{1E51C0FD-EE36-434B-AD2A-FD1FF3731C38}]
[{5FD45A54-9875-698F-E56E-65102358FDF5}]
[{37AC9076-C898-B098-D098-A18319080973}]
[{32023698-6984-8541-9654-698745012523}]
[{9490415F-65F8-B5C5-D8BA-9405FB120549}]
[{50940F85-F015-14F1-A05F-F69858AC6D05}]
[{5E907A48-400E-4EA8-9792-FFAE052D59E9}]
[{6319A1F1-9410-9654-3201-345FFA349136}]
[{91954FAC-1023-154F-895A-1458258AD819}]
[{4FD45A54-9875-698F-E56E-65102358FDF4}]
[{83BA45AF-FAAA-CDDD-BEEE-BCDE1234AB38}]
[{25FD6584-698F-BCD2-602C-698745210352}]
[{22596546-2036-9451-6058-658402589722}]
[{5A069845-2036-6084-9054-6087502480A5}]
[{13FD5987-65D2-C58D-D87E-987451F12531}]
[{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}]
[{7C8D1401-A58D-A81C-CD24-A5915C4517C7}]
注意该项[AppInit_DLLs]修改:把<hmsdvf.dll,asfjthj.dll,asefry.dll,sdvj.dll,asfhjy.dll,hjukrt.dll,dhdhvv.dll,fgjderg.dll,swegfuj.dll,mhgdfg.dll,sdvfrr.dll,vhsdfg.dll,dger.dll,hjdrg.dll,kergt.dll,gfcfg.dll,reger.dll,hrergh.dll,frntrn.dll,qrhhb.dll,drghszd.dll,fngn.dll,gnfctt.dll,xgnfn.dll,xfgnhcgfm.dll,serger.dll,bnxnb.dll,fxgnfx.dll,jzijj.dll,xfgnfx.dll,serghjm.dll,thsddh.dll,xbcvxb.dll,zfdzb.dll,xdndn.dll,xdfntt.dll,hgfhk.dll,dnteh.dll,xfng.dll,njritc.dll,chmfcmh.dll,jwlah.dll,gmnait.dll,hfjg.dll,thurh.dll,mgmgmm.dll,oqrthc.dll,sdrfh.dll,jyjlt.dll,ijatnaw.dll,sehhter.dll,fhjfg.dll,zdbdb.dll,ydgn.dll,dbfb.dll,fjnbv.dll,jrhhh.dll,setrhes.dll,cdxbfxdb.dll,xfgnxfn.dll,gjkhj.dll,xdhdg.dll,rhs.dll,mrjhtjd.dll,zdbfbd.dll,fjyjy.dll,fxnfnh.dll,bjrvm.dll,ektvm.dll,ghthhh.dll,yjrfe.dll,dscef.dll,crugd.dll,lariytrz.dll,hjaiq.dll,kduy.dll,hkfgh.dll,awef.dll,dfhsh.dll,ethsh.dll,stehs.dll,sthth.dll,wfhyt.dll,rgghjj.dll,ghjkdr.dll,hfther.dll,,arjrbler.dll>修改为<>即清空
启动项目 -- 服务-- 驱动程序之如下项删除:
[killrs / killrs]
[NVIDIA Compatible Windows Miniport Driver / cdralw]
系统修复-- 浏览器加载项之如下项删除:
[] <C:\WINDOWS\system32\yzztimsn.dll>
[] <C:\WINDOWS\system32\ypdjgbmp.dll>
[] <C:\WINDOWS\system32\yxfhcjpg.dll>
[] <C:\WINDOWS\system32\mnmhgsrv.dll>
[] <C:\WINDOWS\system32\mndsgsrv.dll>
[] <C:\WINDOWS\system32\zywmgime.dll>
[] <C:\WINDOWS\system32\apsgfjba.dll>
[] <C:\WINDOWS\system32\mndhfdwd.dll>
[] <C:\WINDOWS\system32\zxmscwin.dll>
[] <C:\WINDOWS\system32\mpmyfapi.dll>
[] <C:\WINDOWS\system32\zywmfime.dll>
[] <C:\WINDOWS\system32\apsgejba.dll>
[] <C:\WINDOWS\system32\ozfyebyt.dll>
[] <C:\WINDOWS\system32\pjjxedwd.dll>
[] <C:\WINDOWS\system32\ptjhehlp.dll>
[] <C:\WINDOWS\system32\zptlcsys.dll>
[] <C:\WINDOWS\system32\apsgdjba.dll>
[] <C:\WINDOWS\system32\arjrbler.dll>
[] <C:\WINDOWS\system32\mpmydapi.dll>
[] <C:\WINDOWS\system32\mpwddapi.dll>
[] <C:\WINDOWS\system32\oswxdttb.dll>
[] <C:\WINDOWS\system32\lijzclit.dll>
[] <C:\WINDOWS\system32\nhmxcjkl.dll>
[] <C:\WINDOWS\system32\yxcschlp.dll>
[] <C:\WINDOWS\system32\skqncbib.dll>
[] <C:\WINDOWS\system32\lassaplo.dll>
[] <C:\WINDOWS\system32\rijxbkin.dll>
[] <C:\WINDOWS\system32\opshbbty.dll>
[] <C:\WINDOWS\system32\tisqatyu.dll>
[] <C:\WINDOWS\system32\swsxachu.dll>
[] <C:\WINDOWS\system32\yzztimsn.dll>
[] <C:\WINDOWS\system32\ypdjgbmp.dll>
[] <C:\WINDOWS\system32\yxfhcjpg.dll>
[] <C:\WINDOWS\system32\mnmhgsrv.dll>
[] <C:\WINDOWS\system32\mndsgsrv.dll>
[] <C:\WINDOWS\system32\zywmgime.dll>
[] <C:\WINDOWS\system32\apsgfjba.dll>
[] <C:\WINDOWS\system32\mndhfdwd.dll>
[] <C:\WINDOWS\system32\zxmscwin.dll>
[] <C:\WINDOWS\system32\mpmyfapi.dll>
[] <C:\WINDOWS\system32\zywmfime.dll>
[] <C:\WINDOWS\system32\apsgejba.dll>
[] <C:\WINDOWS\system32\ozfyebyt.dll>
[] <C:\WINDOWS\system32\pjjxedwd.dll>
[] <C:\WINDOWS\system32\ptjhehlp.dll>
[] <C:\WINDOWS\system32\zptlcsys.dll>
[] <C:\WINDOWS\system32\apsgdjba.dll>
[] <C:\WINDOWS\system32\arjrbler.dll>
[] <C:\WINDOWS\system32\mpmydapi.dll>
[] <C:\WINDOWS\system32\mpwddapi.dll>
[] <C:\WINDOWS\system32\oswxdttb.dll>
[] <C:\WINDOWS\system32\lijzclit.dll>
[] <C:\WINDOWS\system32\nhmxcjkl.dll>
[] <C:\WINDOWS\system32\yxcschlp.dll>
[] <C:\WINDOWS\system32\skqncbib.dll>
[] <C:\WINDOWS\system32\lassaplo.dll>
[] <C:\WINDOWS\system32\rijxbkin.dll>
[] <C:\WINDOWS\system32\opshbbty.dll>
[] <C:\WINDOWS\system32\tisqatyu.dll>
[] <C:\WINDOWS\system32\swsxachu.dll>
做完下载以下软件清理一次并更新杀毒软件至最新进行全盘杀毒一次
清理系统临时文件和IE临时文件夹
http://www.atribune.org/public-beta/ATF-Cleaner.exe 用金山清理专家清理恶意软件
http://www.duba.net/zt/ksc/down.shtml 下载 windows清理助手清理一遍
http://www.arswp.com/download/arswp2/arswp2.zip