启动项目--注册表--删除以下项目
<kcoin><kcoin32.exe> []
<{7c8d1401-a58d-a81c-cd24-a5915c4517c7}><c:\windows\system32\mnmhgsrv.dll> [file is missing]
<{528df602-9541-a985-210a-984a698c6f25}><c:\windows\system32\ptjhehlp.dll> [file is missing]
<{50940f85-f015-14f1-a05f-f69858ac6d05}><c:\windows\system32\zptlcsys.dll> [file is missing]
<{7fd45a54-9875-698f-e56e-65102358fdf7}><c:\windows\system32\apsggjba.dll> [file is missing]
<{6c648541-1025-9650-9057-6541258720c6}><c:\windows\system32\mndhfdwd.dll> [file is missing]
<{00050005-0005-0005-0005-00050005bb15}><c:\windows\system32\cliconfgzx.dll> [file is missing]
<{00060006-0006-0006-0006-00060006bb15}><c:\windows\system32\dispexcb.dll> [file is missing]
<{91954fac-1023-154f-895a-1458258ad819}><c:\windows\system32\ypdjgbmp.dll> [file is missing]
<cliconfgzx.dll><c:\windows\system32\cliconfgzx.dll> [file is missing]
<dispexcb.dll><c:\windows\system32\dispexcb.dll> [file is missing]
==================================
删除驱动程序
[iis manager / iis manager ][stopped/manual start]
<\??\c:\docume~1\admini~1\locals~1\temp\1.tmp><n/a>
==================================
删除浏览器加载项
{50940f85-f015-14f1-a05f-f69858ac6d05} <c:\windows\system32\zptlcsys.dll, n/a>
{528df602-9541-a985-210a-984a698c6f25} <c:\windows\system32\ptjhehlp.dll, n/a>
{6c648541-1025-9650-9057-6541258720c6} <c:\windows\system32\mndhfdwd.dll, n/a>
{7c8d1401-a58d-a81c-cd24-a5915c4517c7} <c:\windows\system32\mnmhgsrv.dll, n/a>
{7fd45a54-9875-698f-e56e-65102358fdf7} <c:\windows\system32\apsggjba.dll, n/a>
{91954fac-1023-154f-895a-1458258ad819} <c:\windows\system32\ypdjgbmp.dll, n/a>
==================================
重启，显示隐藏文件后删除
c:\windows\system32\kcoin32.exe
c:\docume~1\admini~1\locals~1\temp\1.tmp
