以下操作全部断网执行,需要的工具先下好再进行操作
C:\WINDOWS\system32\1104DED1.dat
C:\WINDOWS\System32\COMRes.dll
C:\Program Files\Internet Explorer\PowerNt.Onz
C:\WINDOWS\System32\Drivers\msiffei.sys
C:\WINDOWS\system32\1104DED1.dat
C:\WINDOWS\system32\mbgpfkbf.dll
C:\WINDOWS\system32\kbfhjnie.dll
C:\WINDOWS\system32\lgbeficg.dll
C:\WINDOWS\system32\ckldcagg.dll
C:\WINDOWS\system32\clmecbal.dll
C:\WINDOWS\system32\dpbddemn.dll
C:\WINDOWS\system32\jmolkmic.dll
C:\WINDOWS\system32\klogamhn.dll
C:\WINDOWS\system32\foakkjhc.dll
C:\WINDOWS\system32\nenfhhdl.dll
C:\WINDOWS\system32\mdfkkefj.dll
C:\WINDOWS\system32\icophdig.dll
C:\WINDOWS\system32\cdmfkphd.dll
C:\WINDOWS\system32\ciklniba.dll
C:\WINDOWS\system32\anymie360.dll
C:\WINDOWS\system32\anymie360.exe
上面文件用XDelBox一次性删除
(enao.ys168.com 下载)
复制上面所有要删除的文件,打开XDelBox,在待删除列表点 右键==>选择 剪贴版导入不检查路径==>点 右键==>选择==>立刻重启执行删除
解压运行附件的工具Antivirus
将附件的COMRes.dll放到C:\WINDOWS\System32下
编辑<AppInit_DLLs>为空,即删除<C:\WINDOWS\System32\COMRes.dll C:\WINDOWS\system32\COMRes.dll,mbgpfkbf.dll,kbfhjnie.dll,lgbeficg.dll,ckldcagg.dll,clmecbal.dll,dpbddemn.dll,jmolkmic.dll,klogamhn.dll,foakkjhc.dll,nenfhhdl.dll,mdfkkefj.dll,icophdig.dll,cdmfkphd.dll,ciklniba.dll>
删除注册表项目
<Alcmtr><anymie360.exe> []
<{6B09F4BF-FA23-472A-9548-F839CAEC7494}><C:\WINDOWS\system32\mbgpfkbf.dll> []
<{4BF1372E-4BF0-4578-97C7-DBD80FD86123}><C:\WINDOWS\system32\kbfhjnie.dll> []
<{50BEF2C0-D21C-4844-BD91-5AB33CCF99E5}><C:\WINDOWS\system32\lgbeficg.dll> []
<{C45DCA00-698F-4D11-B640-4A5AB8BEC603}><C:\WINDOWS\system32\ckldcagg.dll> []
<{C56ECBA5-3C77-49D1-B697-F4ED78D24534}><C:\WINDOWS\system32\clmecbal.dll> []
<{D9BDDE67-67C2-45D5-8DAE-D6DC250DBDCF}><C:\WINDOWS\system32\dpbddemn.dll> []
<{3685462C-C648-4CC5-882B-E99A9361BA57}><C:\WINDOWS\system32\jmolkmic.dll> []
<{4580A617-1967-4F7A-A0EC-4A0A69302660}><C:\WINDOWS\system32\klogamhn.dll> []
<{F8A4431C-7D43-4DE6-BEB1-372836AE3370}><C:\WINDOWS\system32\foakkjhc.dll> []
<{7E7F11D5-3201-4745-9305-78A4E2F791CD}><C:\WINDOWS\system32\nenfhhdl.dll> []
<{6DF44EF3-FEC8-4151-B0B1-D5F0976D5753}><C:\WINDOWS\system32\mdfkkefj.dll> []
<{2C891D20-C064-4E9C-A3CB-44B5B8D2AC54}><C:\WINDOWS\system32\icophdig.dll> []
<{CD6F491D-7281-49D9-A47F-AC591137F86D}><C:\WINDOWS\system32\cdmfkphd.dll> []
<{C24572BA-21C9-4884-AC3A-17989E17F842}><C:\WINDOWS\system32\ciklniba.dll> []
<{478932A2-862F-4A34-A264-54A6EB998FDE}><C:\Program Files\Internet Explorer\PowerNt.Onz> []
<2A68BE6A><> [N/A]
<0A42E72D><> [N/A]
<591C0170><> [N/A]
<BB36059B><> [N/A]
<EBB9CB8D><> [N/A]
<9C88C8C6><> [N/A]
<D74310F6><> [N/A]
<9A8925D7><> [N/A]
<FD964551><> [N/A]
<B3724952><> [N/A]
<93F85357><> [N/A]
<4722CC5D><> [N/A]
<9B08A3EA><> [N/A]
<294AC14E><> [N/A]
<039992ED><> [N/A]
<83DA694C><> [N/A]
<C41F1EF4><> [N/A]
<D89338DD><> [N/A]
<21C4910C><> [N/A]
<026981D3><> [N/A]
<C1FBE4AB><> [N/A]
<B7FE8095><> [N/A]
<00FA0636><> [N/A]
<F2A790D8><> [N/A]
<D9449D24><> [N/A]
<297DA1D5><> [N/A]
<E241F5FA><> [N/A]
<6B09F4BF><C:\WINDOWS\system32\mbgpfkbf.dll> []
<4BF1372E><C:\WINDOWS\system32\kbfhjnie.dll> []
<50BEF2C0><C:\WINDOWS\system32\lgbeficg.dll> []
<C45DCA00><C:\WINDOWS\system32\ckldcagg.dll> []
<C56ECBA5><C:\WINDOWS\system32\clmecbal.dll> []
<D9BDDE67><C:\WINDOWS\system32\dpbddemn.dll> []
<3685462C><C:\WINDOWS\system32\jmolkmic.dll> []
<4580A617><C:\WINDOWS\system32\klogamhn.dll> []
<F8A4431C><C:\WINDOWS\system32\foakkjhc.dll> []
<7E7F11D5><C:\WINDOWS\system32\nenfhhdl.dll> []
<6DF44EF3><C:\WINDOWS\system32\mdfkkefj.dll> []
<2C891D20><C:\WINDOWS\system32\icophdig.dll> []
<CD6F491D><C:\WINDOWS\system32\cdmfkphd.dll> []
<C24572BA><C:\WINDOWS\system32\ciklniba.dll> []
删除驱动服务
[msiffei / msiffei][Stopped/Manual Start]
<System32\Drivers\msiffei.sys><N/A>
[Safe Mon 360 / SafeMon0][Running/System Start]
<\??\C:\WINDOWS\system32\1104DED1.dat><N/A>
删除浏览器加载项
[]
{478932A2-862F-4A34-A264-54A6EB998FDE} <C:\Program Files\Internet Explorer\PowerNt.Onz, N/A>
重置HOSTS文件,清空临时文件夹