1.建议使用XDelBox删除以下文件:(
XDelBox1.6下载)
使用说明:删除时复制所有要删除文件的路径,在待删除文件列表里点击右键选择从剪贴板导入,导入后在要删除文件上点击右键,选择立刻重启删除,电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质(包括U盘,MP3,手机存储卡等)。
c:\windows\system32\leknndph.dll
c:\windows\system32\wklsdd.dll
c:\6a84753cf0d6bdbd.dat
c:\7f1abf68afce6af8.dat
c:\96c704fc937ecad9.dat
c:\a3dacea85a272ced.dat
c:\docume~1\admini~1\locals~1\temp\1.tmp
c:\windows\system32\d32dx9.sys
c:\d789bff8dfd8c350.dat
c:\fd8a39f8a8375ab7.dat
c:\windows\system32\promote.dll
2.删除重启后使用SREng修复下面各项: 启动项目 -- 注册表之如下项删除:
[adsntzt.dll] <>
[bootvidgj.dll] <>
[dispexcb.dll] <>
[kbdswjr.dll] <>
[cliconfgzx.dll] <>
[{00250025-0025-0025-0025-00250025BB15}] <>
[{00300030-0030-0030-0030-00300030BB15}] <>
[{50A8A8C4-EDC9-4ABD-A0A2-2E2418982189}] <>
[{00010001-0001-0001-0001-00010001BB15}] <>
[{00030003-0003-0003-0003-00030003BB15}] <>
[{00060006-0006-0006-0006-00060006BB15}] <>
[{00120012-0012-0012-0012-00120012BB15}] <>
[{28766E1C-74B0-4417-8C75-F12AE309EF35}] <>
[{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}] <>
[{45AADFAA-DD36-42AB-83AD-0521BBF58C24}] <>
[{A9895933-6636-4281-BC58-EE6DE2AF96E3}] <>
[{8C41B7F7-3168-400D-A702-0E7EFE0BA304}] <>
[{C0595A7E-2E2F-4B34-A83A-019270A0A464}] <>
[{841529CB-7F77-4B99-A895-B5441E0D302F}] <>
[{000F087F-4378-545F-74FA-37D345AD7A8C}] <>
[{00050005-0005-0005-0005-00050005BB15}] <>
[{81AF1CF6-D1C9-4C6A-AC01-EDE54E71945B}] <>
[{00ED0F3B-D53B-4DBF-BB20-8DFBC3176068}] <>
[{000030AE-0380-4351-8244-EE98A3240370}] <>
[load] <>
[leknndph.dll] <C:\WINDOWS\system32\leknndph.dll>
[{E8A3B193-77E3-4FB3-986D-F4FA4828BAFC}] <C:\WINDOWS\system32\wklsdd.dll>
[{00150015-0015-0015-0015-00150015BB15}] <C:\WINDOWS\system32\leknndph.dll>
启动项目 -- 服务-- 驱动程序之如下项禁用:
[6a84753cf0d6bdbd / 6a84753cf0d6bdbd] <\??\C:\6a84753cf0d6bdbd.dat>
[7f1abf68afce6af8 / 7f1abf68afce6af8] <\??\C:\7f1abf68afce6af8.dat>
[96c704fc937ecad9 / 96c704fc937ecad9] <\??\C:\96c704fc937ecad9.dat>
[a3dacea85a272ced / a3dacea85a272ced] <\??\C:\a3dacea85a272ced.dat>
[IIS Manager / IIS Manager ] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\1.tmp>
[HiddFldy / HiddFldy] <\??\C:\WINDOWS\system32\d32dx9.sys>
[d789bff8dfd8c350 / d789bff8dfd8c350] <\??\C:\d789bff8dfd8c350.dat>
[fd8a39f8a8375ab7 / fd8a39f8a8375ab7] <\??\C:\fd8a39f8a8375ab7.dat>
系统修复-- 浏览器加载项之如下项删除:
[Promote Class] <C:\WINDOWS\system32\promote.dll>